cyber-threat-intelligence

There are 53 repositories under cyber-threat-intelligence topic.

mytechnotalent / Reverse-Engineering
A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit ARM & 64-bit ARM architectures.
reverse-engineering hacking x86 x64 assembly assembly-language assembly-language-programming cybersecurity arm c-plus-plus assembly-x86-64 cyber-security cyber-threat-intelligence arm-assembly c reverse-engineering-tutorial malware go golang rust
Language:Assembly 9969
IntelOwl
intelowlproject / IntelOwl
IntelOwl: manage your Threat Intelligence at scale
security-tools python threat-intelligence ioc incident-response cyber-threat-intelligence enrichment honeynet osint osint-python threatintel malware-analysis malware-analyzer intel-owl threat-hunting hacktoberfest cyber-security cybersecurity threathunting dfir
Language:Python 3102
mitre-attack / attack-navigator
Web app that provides basic navigation and annotation of ATT&CK matrices
cti cyber-threat-intelligence mitre-attack mitre-corporation cybersecurity
Language:TypeScript 1872
mitre / cti
Cyber Threat Intelligence Repository expressed in STIX 2.0
attack cti cyber-threat-intelligence stix
1624
center-for-threat-informed-defense / adversary_emulation_library
An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.
ctid cybersecurity threat-informed-defense mitre-attack red-team cyber-threat-intelligence adversary-emulation adversary-emulation-plans
Language:C 1535
mytechnotalent / Hacking-Windows
A FREE Windows C development course where we will learn the Win32API and reverse engineer each step utilizing IDA Free in both an x86 and x64 environment.
hacking windows assembly assembler cpp cplusplus ida ida-pro idapro reverse-engineering blue-team training training-materials training-material cybersecurity hack cyber cyber-threat-intelligence win32api microsoft-windows
Language:C 1290
Cortex
TheHive-Project / Cortex
Cortex: a Powerful Observable Analysis and Active Response Engine
response dfir analysis analyzer thehive engine scala python rest api security-incidents digital-forensics iocs observable free free-software open-source incident-response cyber-threat-intelligence cortex
Language:Scala 1240
mitre-attack / car
Cyber Analytics Repository
cyber-analytics cyber-threat-intelligence cybersecurity mitre-corporation
Language:Python 866
mitre-attack / attack-scripts
Scripts and a (future) library to improve users' interactions with the ATT&CK content
cti cyber-threat-intelligence cybersecurity mitre-attack mitre-corporation python
Language:Python 573
center-for-threat-informed-defense / attack-flow
Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by developing a representation of attack flows, modeling attack flows for a small corpus of incidents, and creating visualization tools to display attack flows.
cybersecurity ctid mitre-attack cyber-threat-intelligence threat-informed-defense
Language:TypeScript 496
center-for-threat-informed-defense / attack-control-framework-mappings
🚨ATTENTION🚨 The NIST 800-53 mappings have migrated to the Center’s Mappings Explorer project. See README below. This repository is kept here as an archive.
cti cyber-threat-intelligence mitre-attack cybersecurity nist800-53 security-controls ctid threat-informed-defense risk-management
Language:Python 467
mitre-attack / attack-website
MITRE ATT&CK Website
cti cyber-threat-intelligence cybersecurity mitre-attack mitre-corporation
Language:HTML 455
Cortex-Analyzers
TheHive-Project / Cortex-Analyzers
Cortex Analyzers Repository
thehive analyzer cortex free free-software open-source observable ioc json incident-response digital-forensics dfir cyber-threat-intelligence python enrichment
Language:Python 412
center-for-threat-informed-defense / tram
TRAM is an open-source platform designed to advance research into automating the mapping of cyber threat intelligence reports to MITRE ATT&CK®.
ctid cyber-threat-intelligence threat-informed-defense mitre-attack cybersecurity
Language:Jupyter Notebook 389
mitre-attack / mitreattack-python
A python module for working with ATT&CK
cti cyber-threat-intelligence cybersecurity mitre-attack mitre-corporation python
Language:Python 367
oasis-open / cti-python-stix2
OASIS TC Open Repository: Python APIs for STIX 2
python stix stix2 cyber-threat-intelligence json cti oasis
Language:Python 349
mitre-attack / attack-stix-data
STIX data representing MITRE ATT&CK
attack cti cyber-threat-intelligence cybersecurity mitre-corporation stix
Language:Python 281
eclecticiq / OpenTAXII
TAXII server implementation in Python from EclecticIQ
taxii stix cti python taxii-server threatintel threat-sharing cyber-threat-intelligence
Language:Python 180
center-for-threat-informed-defense / cti-blueprints
CTI Blueprints is a free suite of templates and tools that helps Cyber Threat Intelligence analysts create high-quality, actionable reports more consistently and efficiently.
ctid cyber-threat-intelligence cybersecurity incident-response malware-analysis mitre-attack threat-actors threat-informed-defense
Language:TypeScript 157
travisbgreen / hunting-rules
Suricata rules for network anomaly detection
suricata-rule suricata ids nsm threat-hunting cybersecurity anomaly-detection cyber-threat-intelligence network-security network-monitoring lateral-movement threat-intelligence
139
jackaduma / SecBERT
pretrained BERT model for cyber security text, learned CyberSecurity Knowledge
apt attention bert bert-embeddings cyber-security cyber-threat-intelligence cybersecurity deep-learning-security deeplearning machine-learning-security nlp nlp-machine-learning security security-automation threat-analysis threat-detection threat-hunting threat-intelligence transformer-encoder transformers
Language:Python 132
oasis-open / cti-stix-visualization
OASIS TC Open Repository: Lightweight visualization for STIX 2.0 objects and relationships
javascript stix stix2 json cti oasis cyber-threat-intelligence visualization visualizer
Language:JavaScript 128
center-for-threat-informed-defense / insider-threat-ttp-kb
The principal objective of this project is to develop a knowledge base of the tactics, techniques, and procedures (TTPs) used by insiders in the IT environment. It will establish an Insider Threat TTP Knowledge Base, built upon data collected on insider threat incidents and lessons learned and experience from the ATT&CK knowledge base.
cybersecurity ctid mitre-attack cyber-threat-intelligence insider-threat threat-informed-defense
Language:Python 124
intelowlproject / GreedyBear
Threat Intel Platform for T-POTs
honeypot threat-intelligence cyber-threat-intelligence threatintel cybersecurity open-source python ioc tpot hacktoberfest
Language:Python 116
oasis-open / cti-taxii-server
OASIS TC Open Repository: TAXII 2 Server Library Written in Python
python python-script taxii taxii2 cti oasis cyber-threat-intelligence server
Language:Python 112
center-for-threat-informed-defense / top-attack-techniques
Top ATT&CK Techniques provides defenders with a systematic approach to prioritizing ATT&CK techniques.
ctid cyber-threat-intelligence cybersecurity mitre-attack
110
curated-intel / Initial-Access-Broker-Landscape
A visualized overview of the Initial Access Broker (IAB) cybercrime landscape
cyber-threat-intelligence cti ransomware malware darkweb iab initial-access-broker initial-access-brokers initial access initial-access
105
vlegoy / rcATT
A python app to predict Att&ck tactics and techniques from cyber threat reports
cyber-threat-intelligence attack ttp multi-label-classification
Language:Python 104
oasis-open / cti-stix2-json-schemas
OASIS TC Open Repository: Non-normative schemas and examples for STIX 2
stix stix2 cti oasis cyber-threat-intelligence antlr json json-schema schemas
Language:ANTLR 103
oasis-open / cti-taxii-client
OASIS TC Open Repository: TAXII 2 Client Library Written in Python
python taxii taxii2 json cti oasis cyber-threat-intelligence client
Language:Python 103
oasis-open / cti-documentation
OASIS TC Open Repository: GitHub Pages site for STIX and TAXII
oasis cti stix stix2 taxii taxii2 json cyber-threat-intelligence
Language:SCSS 89
OsmanKandemir / indicator-intelligence
Finds related domains and IPv4 addresses to do threat intelligence after Indicator-Intelligence collects static files.
cyber-intelligence malicious-domains malicious-ips malware-research threat-intelligence domains malicious malicious-link cyber-analyst cyber-security malicious-url-detection security-tools cti cyber-threat-analyst cyber-threat-hunting cyber-threat-intelligence ioc
Language:Python 84
jackaduma / ThreatReportExtractor
Extracting Attack Behavior from Threat Reports
advanced-persistent-threat cyber-threat-intelligence cybersecurity deep-learning deeplearning graph graph-algorithms machine-learning machine-learning-algorithms natural-language-processing nlp nlp-machine-learning nlp-parsing security threat-analysis threat-intelligence
Language:Python 73
BushidoUK / Exploring-APT-campaigns
Further investigation in to APT campaigns disclosed by private security firms and security agencies
threatintel cti cybersecurity cyber-threat-intelligence
70
center-for-threat-informed-defense / attack_to_veris
🚨ATTENTION🚨 The VERIS mappings have migrated to the Center’s Mappings Explorer project. See README below. This repository is kept here as an archive.
cybersecurity ctid mitre-attack cyber-threat-intelligence threat-informed-defense veris
Language:Python 69
paulveillard / cybersecurity-SOAR
A collection of awesome framework, libraries, learning tutorials, videos, webcasts, technical resources and cool stuff about Security Orchestration, Automation and Response (SOAR).
soar orchestration orchestration-services scalability incident-response incident-management cyber-threat-intelligence security-hardening os-hardening ios-hacking hacking-tools siem design-patterns scalable-applications incident-matrix compliance-as-code compliant regulatory
68

cyber-threat-intelligence

mytechnotalent / Reverse-Engineering

intelowlproject / IntelOwl

mitre-attack / attack-navigator

mitre / cti

center-for-threat-informed-defense / adversary_emulation_library

mytechnotalent / Hacking-Windows

TheHive-Project / Cortex

mitre-attack / car

mitre-attack / attack-scripts

center-for-threat-informed-defense / attack-flow

center-for-threat-informed-defense / attack-control-framework-mappings

mitre-attack / attack-website

TheHive-Project / Cortex-Analyzers

center-for-threat-informed-defense / tram

mitre-attack / mitreattack-python

oasis-open / cti-python-stix2

mitre-attack / attack-stix-data

eclecticiq / OpenTAXII

center-for-threat-informed-defense / cti-blueprints

travisbgreen / hunting-rules

jackaduma / SecBERT

oasis-open / cti-stix-visualization

center-for-threat-informed-defense / insider-threat-ttp-kb

intelowlproject / GreedyBear

oasis-open / cti-taxii-server

center-for-threat-informed-defense / top-attack-techniques

curated-intel / Initial-Access-Broker-Landscape

vlegoy / rcATT

oasis-open / cti-stix2-json-schemas

oasis-open / cti-taxii-client

oasis-open / cti-documentation

OsmanKandemir / indicator-intelligence

jackaduma / ThreatReportExtractor

BushidoUK / Exploring-APT-campaigns

center-for-threat-informed-defense / attack_to_veris

paulveillard / cybersecurity-SOAR