cyber-threat-intelligence

There are 73 repositories under cyber-threat-intelligence topic.

IntelOwl
intelowlproject / IntelOwl
IntelOwl: manage your Threat Intelligence at scale
security-tools python threat-intelligence ioc incident-response cyber-threat-intelligence enrichment honeynet osint osint-python threatintel malware-analysis malware-analyzer intel-owl threat-hunting hacktoberfest cyber-security cybersecurity threathunting dfir
Language:Python 4313
mitre-attack / attack-navigator
Web app that provides basic navigation and annotation of ATT&CK matrices
cti cyber-threat-intelligence cybersecurity mitre-attack mitre-corporation
Language:TypeScript 2217
center-for-threat-informed-defense / adversary_emulation_library
An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.
ctid cybersecurity threat-informed-defense mitre-attack red-team cyber-threat-intelligence adversary-emulation adversary-emulation-plans
Language:C 1987
mitre / cti
Cyber Threat Intelligence Repository expressed in STIX 2.0
attack cti cyber-threat-intelligence stix
1945
mytechnotalent / Hacking-Windows
A FREE Windows C development course where we will learn the Win32API and reverse engineer each step utilizing IDA Free in both an x86 and x64 environment.
assembler assembly blue-team cplusplus cpp cyber cyber-threat-intelligence cybersecurity hack hacking ida ida-pro idapro microsoft-windows reverse-engineering training training-material training-materials win32api windows
Language:C 1503
Cortex
TheHive-Project / Cortex
Cortex: a Powerful Observable Analysis and Active Response Engine
response dfir analysis analyzer thehive engine scala python rest api security-incidents digital-forensics iocs observable free free-software open-source incident-response cyber-threat-intelligence cortex
Language:Scala 1478
mitre-attack / car
Cyber Analytics Repository
cyber-analytics cyber-threat-intelligence cybersecurity mitre-corporation
Language:Python 957
center-for-threat-informed-defense / attack-flow
Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by developing a representation of attack flows, modeling attack flows for a small corpus of incidents, and creating visualization tools to display attack flows.
cybersecurity ctid mitre-attack cyber-threat-intelligence threat-informed-defense
Language:TypeScript 681
aw-junaid / Hacking-Tools
This Repository is a collection of different ethical hacking tools and malware's for penetration testing and research purpose written in python, ruby, rust, c++, go and c.
python algorithms artificial-intelligence bugbounty cryptography cyber-threat-intelligence cybersecurity-projects ethical-hacking hacking-tools malware nessus network-monitoring network-security nmap portscanner pythonprojects threat-intelligence virus-scanning
Language:C 626
mitre-attack / mitreattack-python
A python module for working with ATT&CK
cti cyber-threat-intelligence cybersecurity mitre-attack mitre-corporation python
Language:HTML 589
mitre-attack / attack-scripts
Scripts and a (future) library to improve users' interactions with the ATT&CK content
cybersecurity cyber-threat-intelligence mitre-corporation cti mitre-attack python
Language:Python 586
mxm0z / awesome-intelligence-writing
Collection of awesome resources on intelligence writing, including manuals/guides, standards, books, tranings, articles, videos, etc
intelligence writing threatintel awesome awesome-list cyber-threat-intelligence intelligence-analysis reporting threat-intelligence threat-reports writings
565
mitre-attack / attack-website
MITRE ATT&CK Website
cybersecurity mitre-corporation cyber-threat-intelligence mitre-attack cti
Language:HTML 543
center-for-threat-informed-defense / tram
TRAM is an open-source platform designed to advance research into automating the mapping of cyber threat intelligence reports to MITRE ATT&CK®.
ctid cyber-threat-intelligence threat-informed-defense mitre-attack cybersecurity
Language:Jupyter Notebook 516
center-for-threat-informed-defense / attack-control-framework-mappings
🚨ATTENTION🚨 The NIST 800-53 mappings have migrated to the Center’s Mappings Explorer project. See README below. This repository is kept here as an archive.
cti cyber-threat-intelligence mitre-attack cybersecurity nist800-53 security-controls ctid threat-informed-defense risk-management
Language:Python 495
Cortex-Analyzers
TheHive-Project / Cortex-Analyzers
Cortex Analyzers Repository
analyzer cortex cyber-threat-intelligence dfir digital-forensics enrichment free free-software incident-response ioc json observable open-source python thehive
Language:Python 467
mitre-attack / attack-stix-data
STIX data representing MITRE ATT&CK
attack stix cybersecurity mitre-corporation cti cyber-threat-intelligence
Language:Python 459
cyberbro
stanfrbd / cyberbro
A simple application that extracts your IoCs from garbage input and checks their reputation using multiple CTI services.
cybersecurity threat-intelligence ipinfo virustotal cyber-threat-intelligence dfir incident-response ioc osint osint-python python security-tools threat-hunting blueteam docker hash security threat infosec
Language:Python 455
oasis-open / cti-python-stix2
OASIS TC Open Repository: Python APIs for STIX 2
cti cyber-threat-intelligence json oasis python stix stix2
Language:Python 400
duggytuxy / Data-Shield_IPv4_Blocklist
Ce projet vise à réduire le nombre d'attaques en bloquant les adresses IP identifiées comme abusives, agressives ou malveillantes.
botnets ddos ipv4 malware ipaddresses malicious cyber-threat-intelligence cybersecurity attack-detection dnssinkhole firewall firewall-configuration firewall-rules network network-security web webapplicationfirewall blacklist-ips blocklist
321
center-for-threat-informed-defense / cti-blueprints
CTI Blueprints is a free suite of templates and tools that helps Cyber Threat Intelligence analysts create high-quality, actionable reports more consistently and efficiently.
ctid cyber-threat-intelligence cybersecurity incident-response malware-analysis mitre-attack threat-actors threat-informed-defense
Language:TypeScript 265
eclecticiq / OpenTAXII
TAXII server implementation in Python from EclecticIQ
cti cyber-threat-intelligence python stix taxii taxii-server threat-sharing threatintel
Language:Python 205
jackaduma / SecBERT
pretrained BERT model for cyber security text, learned CyberSecurity Knowledge
cybersecurity security nlp bert bert-embeddings nlp-machine-learning deeplearning attention transformers transformer-encoder cyber-security security-automation apt machine-learning-security deep-learning-security cyber-threat-intelligence threat-intelligence threat-hunting threat-detection threat-analysis
Language:Python 188
travisbgreen / hunting-rules
Suricata rules for network anomaly detection
suricata-rule suricata ids nsm threat-hunting cybersecurity anomaly-detection cyber-threat-intelligence network-security network-monitoring lateral-movement threat-intelligence
169
intelowlproject / GreedyBear
Threat Intel Platform for T-POTs
honeypot threat-intelligence cyber-threat-intelligence threatintel cybersecurity open-source python ioc tpot hacktoberfest
Language:Python 161
oasis-open / cti-stix-visualization
OASIS TC Open Repository: Lightweight visualization for STIX 2.0 objects and relationships
cti cyber-threat-intelligence javascript json oasis stix stix2 visualization visualizer
Language:JavaScript 154
center-for-threat-informed-defense / insider-threat-ttp-kb
The principal objective of this project is to develop a knowledge base of the tactics, techniques, and procedures (TTPs) used by insiders in the IT environment. It will establish an Insider Threat TTP Knowledge Base, built upon data collected on insider threat incidents and lessons learned and experience from the ATT&CK knowledge base.
cybersecurity ctid mitre-attack cyber-threat-intelligence insider-threat threat-informed-defense
Language:Python 146
ThreatIntel-Reports
mthcht / ThreatIntel-Reports
Raw data from Threat Intelligence Reports with automatic reports collection and keyword search across thousands of reports
apt cti cyber-threat-intelligence malware-analysis malware-analysis-reports malware-research threat-analysis threat-hunting threat-intelligence threat-modeling threatintel
Language:Python 136
oasis-open / cti-taxii-server
OASIS TC Open Repository: TAXII 2 Server Library Written in Python
cti cyber-threat-intelligence oasis python python-script server taxii taxii2
Language:Python 133
Offensive-Panda / DefenseEvasionTechniques
This comprehensive and central repository is designed for cybersecurity enthusiasts, researchers, and professionals seeking to stay ahead in the field. It provides a valuable resource for those dedicated to improving their skills in malware development, malware research, offensive security, security defenses and measures.
cyber-threat-intelligence edr-evasion malware-development malware-research offensivesecurity
Language:C++ 132
oasis-open / cti-stix2-json-schemas
OASIS TC Open Repository: Non-normative schemas and examples for STIX 2
stix stix2 cti oasis cyber-threat-intelligence antlr json json-schema schemas
Language:ANTLR 127
vlegoy / rcATT
A python app to predict Att&ck tactics and techniques from cyber threat reports
cyber-threat-intelligence attack ttp multi-label-classification
Language:Python 125
center-for-threat-informed-defense / top-attack-techniques
Top ATT&CK Techniques helps defenders approach the breadth and complexity of MITRE ATT&CK® with a prioritized top 10 list of techniques to focus on first.
ctid cyber-threat-intelligence cybersecurity mitre-attack
Language:Vue 119
oasis-open / cti-taxii-client
OASIS TC Open Repository: TAXII 2 Client Library Written in Python
client cti cyber-threat-intelligence json oasis python taxii taxii2
Language:Python 116
curated-intel / Initial-Access-Broker-Landscape
A visualized overview of the Initial Access Broker (IAB) cybercrime landscape
access cti cyber-threat-intelligence darkweb iab initial initial-access initial-access-broker initial-access-brokers malware ransomware
114
gertjanbruggink / metrics
This directory features proven systems that demonstrate value to your threat-informed efforts using metrics.
cyber-security cyber-threat-intelligence cybersecurity decision-making metrics systems threat-informed
114

cyber-threat-intelligence

intelowlproject / IntelOwl

mitre-attack / attack-navigator

center-for-threat-informed-defense / adversary_emulation_library

mitre / cti

mytechnotalent / Hacking-Windows

TheHive-Project / Cortex

mitre-attack / car

center-for-threat-informed-defense / attack-flow

aw-junaid / Hacking-Tools

mitre-attack / mitreattack-python

mitre-attack / attack-scripts

mxm0z / awesome-intelligence-writing

mitre-attack / attack-website

center-for-threat-informed-defense / tram

center-for-threat-informed-defense / attack-control-framework-mappings

TheHive-Project / Cortex-Analyzers

mitre-attack / attack-stix-data

stanfrbd / cyberbro

oasis-open / cti-python-stix2

duggytuxy / Data-Shield_IPv4_Blocklist

center-for-threat-informed-defense / cti-blueprints

eclecticiq / OpenTAXII

jackaduma / SecBERT

travisbgreen / hunting-rules

intelowlproject / GreedyBear

oasis-open / cti-stix-visualization

center-for-threat-informed-defense / insider-threat-ttp-kb

mthcht / ThreatIntel-Reports

oasis-open / cti-taxii-server

Offensive-Panda / DefenseEvasionTechniques

oasis-open / cti-stix2-json-schemas

vlegoy / rcATT

center-for-threat-informed-defense / top-attack-techniques

oasis-open / cti-taxii-client

curated-intel / Initial-Access-Broker-Landscape

gertjanbruggink / metrics