cyber-threat-intelligence

There are 64 repositories under cyber-threat-intelligence topic.

IntelOwl
intelowlproject / IntelOwl
IntelOwl: manage your Threat Intelligence at scale
cyber-security cyber-threat-intelligence cybersecurity dfir enrichment hacktoberfest honeynet incident-response intel-owl ioc malware-analysis malware-analyzer osint osint-python python security-tools threat-hunting threat-intelligence threathunting threatintel
Language:Python 3977
mitre-attack / attack-navigator
Web app that provides basic navigation and annotation of ATT&CK matrices
cti cyber-threat-intelligence mitre-attack mitre-corporation cybersecurity
Language:TypeScript 2049
center-for-threat-informed-defense / adversary_emulation_library
An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.
ctid cybersecurity threat-informed-defense mitre-attack red-team cyber-threat-intelligence adversary-emulation adversary-emulation-plans
Language:C 1792
mitre / cti
Cyber Threat Intelligence Repository expressed in STIX 2.0
attack cti cyber-threat-intelligence stix
1783
mytechnotalent / Hacking-Windows
A FREE Windows C development course where we will learn the Win32API and reverse engineer each step utilizing IDA Free in both an x86 and x64 environment.
hacking windows assembly assembler cpp cplusplus ida ida-pro idapro reverse-engineering blue-team training training-materials training-material cybersecurity hack cyber cyber-threat-intelligence win32api microsoft-windows
Language:C 1399
Cortex
TheHive-Project / Cortex
Cortex: a Powerful Observable Analysis and Active Response Engine
analysis analyzer api cortex cyber-threat-intelligence dfir digital-forensics engine free free-software incident-response iocs observable open-source python response rest scala security-incidents thehive
Language:Scala 1370
mitre-attack / car
Cyber Analytics Repository
cyber-analytics cyber-threat-intelligence cybersecurity mitre-corporation
Language:Python 914
mitre-attack / attack-scripts
Scripts and a (future) library to improve users' interactions with the ATT&CK content
cybersecurity cyber-threat-intelligence mitre-corporation cti mitre-attack python
Language:Python 585
center-for-threat-informed-defense / attack-flow
Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by developing a representation of attack flows, modeling attack flows for a small corpus of incidents, and creating visualization tools to display attack flows.
cybersecurity ctid mitre-attack cyber-threat-intelligence threat-informed-defense
Language:TypeScript 575
mxm0z / awesome-intelligence-writing
Collection of awesome resources on intelligence writing, including manuals/guides, standards, books, tranings, articles, videos, etc
awesome awesome-list cyber-threat-intelligence intelligence intelligence-analysis reporting threat-intelligence threat-reports threatintel writing writings
532
mitre-attack / attack-website
MITRE ATT&CK Website
cybersecurity mitre-corporation cyber-threat-intelligence mitre-attack cti
Language:HTML 503
mitre-attack / mitreattack-python
A python module for working with ATT&CK
cybersecurity cyber-threat-intelligence mitre-corporation cti mitre-attack python
Language:Python 501
aw-junaid / Hacking-Tools
This Repository is a collection of different ethical hacking tools and malware's for penetration testing and research purpose written in python, ruby, rust, c++, go and c.
python algorithms artificial-intelligence bugbounty cryptography cyber-threat-intelligence cybersecurity-projects ethical-hacking hacking-tools malware nessus network-monitoring network-security nmap portscanner pythonprojects threat-intelligence virus-scanning
Language:C 488
center-for-threat-informed-defense / attack-control-framework-mappings
🚨ATTENTION🚨 The NIST 800-53 mappings have migrated to the Center’s Mappings Explorer project. See README below. This repository is kept here as an archive.
cti cyber-threat-intelligence mitre-attack cybersecurity nist800-53 security-controls ctid threat-informed-defense risk-management
Language:Python 488
center-for-threat-informed-defense / tram
TRAM is an open-source platform designed to advance research into automating the mapping of cyber threat intelligence reports to MITRE ATT&CK®.
ctid cyber-threat-intelligence threat-informed-defense mitre-attack cybersecurity
Language:Jupyter Notebook 464
Cortex-Analyzers
TheHive-Project / Cortex-Analyzers
Cortex Analyzers Repository
analyzer cortex cyber-threat-intelligence dfir digital-forensics enrichment free free-software incident-response ioc json observable open-source python thehive
Language:Python 441
oasis-open / cti-python-stix2
OASIS TC Open Repository: Python APIs for STIX 2
cti cyber-threat-intelligence json oasis python stix stix2
Language:Python 376
mitre-attack / attack-stix-data
STIX data representing MITRE ATT&CK
attack cti cyber-threat-intelligence cybersecurity mitre-corporation stix
Language:Python 357
stanfrbd / cyberbro
A simple application that extracts your IoCs from garbage input and checks their reputation using multiple CTI services.
blueteam cyber-threat-intelligence cybersecurity dfir docker hash incident-response infosec ioc ipinfo osint osint-python python security security-tools threat threat-hunting threat-intelligence virustotal
Language:HTML 248
center-for-threat-informed-defense / cti-blueprints
CTI Blueprints is a free suite of templates and tools that helps Cyber Threat Intelligence analysts create high-quality, actionable reports more consistently and efficiently.
ctid cyber-threat-intelligence cybersecurity incident-response malware-analysis mitre-attack threat-actors threat-informed-defense
Language:TypeScript 220
duggytuxy / malicious_ip_addresses
Lists of addresses of the most active C2, Botnets, Zombies, Scanners DST = France & Belgium
botnets ddos ipv4 malware zombies ipaddresses malicious cyber-threat-intelligence cybersecurity
217
eclecticiq / OpenTAXII
TAXII server implementation in Python from EclecticIQ
cti cyber-threat-intelligence python stix taxii taxii-server threat-sharing threatintel
Language:Python 194
jackaduma / SecBERT
pretrained BERT model for cyber security text, learned CyberSecurity Knowledge
apt attention bert bert-embeddings cyber-security cyber-threat-intelligence cybersecurity deep-learning-security deeplearning machine-learning-security nlp nlp-machine-learning security security-automation threat-analysis threat-detection threat-hunting threat-intelligence transformer-encoder transformers
Language:Python 169
travisbgreen / hunting-rules
Suricata rules for network anomaly detection
suricata-rule suricata ids nsm threat-hunting cybersecurity anomaly-detection cyber-threat-intelligence network-security network-monitoring lateral-movement threat-intelligence
155
oasis-open / cti-stix-visualization
OASIS TC Open Repository: Lightweight visualization for STIX 2.0 objects and relationships
javascript stix stix2 json cti oasis cyber-threat-intelligence visualization visualizer
Language:JavaScript 145
center-for-threat-informed-defense / insider-threat-ttp-kb
The principal objective of this project is to develop a knowledge base of the tactics, techniques, and procedures (TTPs) used by insiders in the IT environment. It will establish an Insider Threat TTP Knowledge Base, built upon data collected on insider threat incidents and lessons learned and experience from the ATT&CK knowledge base.
ctid cyber-threat-intelligence cybersecurity insider-threat mitre-attack threat-informed-defense
Language:Python 142
intelowlproject / GreedyBear
Threat Intel Platform for T-POTs
cyber-threat-intelligence cybersecurity hacktoberfest honeypot ioc open-source python threat-intelligence threatintel tpot
Language:Python 139
oasis-open / cti-taxii-server
OASIS TC Open Repository: TAXII 2 Server Library Written in Python
python python-script taxii taxii2 cti oasis cyber-threat-intelligence server
Language:Python 125
oasis-open / cti-stix2-json-schemas
OASIS TC Open Repository: Non-normative schemas and examples for STIX 2
antlr cti cyber-threat-intelligence json json-schema oasis schemas stix stix2
Language:ANTLR 119
vlegoy / rcATT
A python app to predict Att&ck tactics and techniques from cyber threat reports
cyber-threat-intelligence attack ttp multi-label-classification
Language:Python 118
center-for-threat-informed-defense / top-attack-techniques
Top ATT&CK Techniques helps defenders approach the breadth and complexity of MITRE ATT&CK® with a prioritized top 10 list of techniques to focus on first.
ctid cyber-threat-intelligence cybersecurity mitre-attack
Language:Vue 116
oasis-open / cti-taxii-client
OASIS TC Open Repository: TAXII 2 Client Library Written in Python
python taxii taxii2 json cti oasis cyber-threat-intelligence client
Language:Python 113
curated-intel / Initial-Access-Broker-Landscape
A visualized overview of the Initial Access Broker (IAB) cybercrime landscape
cyber-threat-intelligence cti ransomware malware darkweb iab initial-access-broker initial-access-brokers initial access initial-access
109
gertjanbruggink / metrics
This directory features proven systems that demonstrate value to your threat-informed efforts using metrics.
cyber-security cyber-threat-intelligence cybersecurity decision-making metrics systems threat-informed
108
oasis-open / cti-documentation
OASIS TC Open Repository: GitHub Pages site for STIX and TAXII
oasis cti stix stix2 taxii taxii2 json cyber-threat-intelligence
Language:SCSS 97
OsmanKandemir / indicator-intelligence
Finds related domains and IPv4 addresses to do threat intelligence after Indicator-Intelligence collects static files.
cti cyber-analyst cyber-intelligence cyber-security cyber-threat-analyst cyber-threat-hunting cyber-threat-intelligence domains hacking-tools ioc malicious malicious-domains malicious-ips malicious-link malicious-url-detection malware-research security-tools threat-intelligence
Language:Python 94

cyber-threat-intelligence

intelowlproject / IntelOwl

mitre-attack / attack-navigator

center-for-threat-informed-defense / adversary_emulation_library

mitre / cti

mytechnotalent / Hacking-Windows

TheHive-Project / Cortex

mitre-attack / car

mitre-attack / attack-scripts

center-for-threat-informed-defense / attack-flow

mxm0z / awesome-intelligence-writing

mitre-attack / attack-website

mitre-attack / mitreattack-python

aw-junaid / Hacking-Tools

center-for-threat-informed-defense / attack-control-framework-mappings

center-for-threat-informed-defense / tram

TheHive-Project / Cortex-Analyzers

oasis-open / cti-python-stix2

mitre-attack / attack-stix-data

stanfrbd / cyberbro

center-for-threat-informed-defense / cti-blueprints

duggytuxy / malicious_ip_addresses

eclecticiq / OpenTAXII

jackaduma / SecBERT

travisbgreen / hunting-rules

oasis-open / cti-stix-visualization

center-for-threat-informed-defense / insider-threat-ttp-kb

intelowlproject / GreedyBear

oasis-open / cti-taxii-server

oasis-open / cti-stix2-json-schemas

vlegoy / rcATT

center-for-threat-informed-defense / top-attack-techniques

oasis-open / cti-taxii-client

curated-intel / Initial-Access-Broker-Landscape

gertjanbruggink / metrics

oasis-open / cti-documentation

OsmanKandemir / indicator-intelligence