misp

There are 12 repositories under misp topic.

MISP / MISP
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
cti cybersecurity fraud-detection fraud-management fraud-prevention information-exchange information-security information-sharing intelligence malware-analysis misp security stix threat-analysis threat-hunting threat-intel threat-intelligence threat-intelligence-platform threat-sharing threatintel
Language:PHP 5394
TheHive
TheHive-Project / TheHive
TheHive: a Scalable, Open Source and Free Security Incident Response Platform
agplv3 analyzer api cortex dfir digital-forensics free incident-management incident-response incident-response-tooling investigations iocs misp open-source orchestration platform rest scala security-incidents thehive
Language:Scala 3450
eset / malware-ioc
Indicators of Compromises (IOC) of our various investigations
ioc malware yara misp
Language:YARA 1651
Bert-JanP / Hunting-Queries-Detection-Rules
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
azure defender-for-endpoint dfir kql sentinel threat-hunting vulnerability-management zero-day blueteam cybersecurity mde mdi infosec security misp
Language:Python 1264
ThePhish
emalderson / ThePhish
ThePhish: an automated phishing email analysis tool
email detection malware phishing cybersecurity misp thehive thehive4 thehive4py indicators-of-compromise cyberdefense phishing-detection python incident-response free digital-forensics threat-intelligence webapp attack script
Language:Python 1158
Watcher
thalesgroup-cert / Watcher
Watcher - Open Source Cybersecurity Threat Hunting Platform. Developed with Django & React JS.
certificate-transparency certstream cybersecurity django incident-response misp monitoring nltk osint osint-python phishing reactjs rss-bridge security thehive threat-detection threat-hunting threat-intelligence watcher webapp
Language:Python 865
InQuest / ThreatIngestor
Extract and aggregate threat intelligence.
ioc indicators-of-compromise threatintel threat-intelligence osint dfir malware-research security-tools threat-sharing threat-feeds threat-hunting misp fraud-detection threat-analysis intelligence-gathering threat-intelligence-platform yara soar
Language:Python 832
Bert-JanP / Open-Source-Threat-Intel-Feeds
This repository contains Open Source freely usable Threat Intel feeds that can be used without additional requirements. Contains multiple types such as IP, URL, CVE and Hash.
c2 ioc iocfeed malware misp phishing threat-hunting threat-intelligence
Language:Python 566
MISP / misp-warninglists
Warning lists to inform users of MISP about potential false-positives or other information in indicators
dfir false-positive misp misp-warninglists network-forensics threat-intelligence
Language:Python 536
MISP / misp-galaxy
Clusters and elements to attach to MISP events or attributes (like threat actors)
adversaries adversary-groups attack-patternon classification information-exchange malware misp misp-galaxy mitre-adversarial-tactics stix threat-actors threat-hunting threat-intelligence
Language:Python 532
MISP / PyMISP
Python library using the MISP Rest API
api api-client misp threat-sharing threatintel
Language:Python 445
V1D1AN / S1EM
This project is a SIEM with SIRP and Threat Intel, all in one.
kibana elasticsearch logstash filebeat suricata zeek opencti misp malware sigma thehive docker cortex arkime mwdb n8n zircolite yara velociraptor
Language:Shell 412
TheHiveDocs
TheHive-Project / TheHiveDocs
Documentation of TheHive
misp security-incidents iocs thehive cortex administration-guide analyzer rest api incident-response digital-forensics analyst dfir free free-software documentation open-source platform thehive-project
393
OpenCTI-Platform / connectors
OpenCTI Connectors
cybersecurity cti threat-intelligence misp mitre-attack
Language:Python 382
cloudtracer / ThreatPinchLookup
Documentation and Sharing Repository for ThreatPinch Lookup Chrome & Firefox Extension
passivetotal cve osint threatintel threat-hunting chrome-extension security virustotal threatminer circl alienvault dfir censys misp cert whois incident-response shodan ibm-xforce threat-sharing
Language:HTML 361
MISP / misp-modules
Modules for expansion services, enrichment, import and export in MISP and other tools.
misp-modules misp expansion passivetotal domaintools passive-dns threat-intelligence osint cti enrichment
Language:Python 345
MISP / x_old_misp_docker
MISP Docker (XME edition)
misp-docker misp
Language:Shell 283
MISP / misp-book
User guide of MISP
misp documentation misp-book information-exchange information-sharing
Language:Shell 259
tenzir / threatbus
🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.
cif cif3 ids misp opencti opencti-connector sightings threat-bus threat-hunting threat-intelligence threat-intelligence-data threatintel zeek
Language:Python 258
coolacid / docker-misp
A (nearly) production ready Dockered MISP
docker misp security security-tools threat-intelligence threat-sharing
Language:Shell 230
MISP / misp-dashboard
A live dashboard for a real-time overview of threat intelligence from MISP instances
misp cybersecurity cyber-security threatintel threat-intelligence dashboard
Language:JavaScript 194
harvard-itsecurity / docker-misp
Automated Docker MISP container - Malware Information Sharing Platform and Threat Sharing
misp dockerhub security information-security threat-sharing malware malware-analysis threat-intelligence
Language:Dockerfile 175
MISP / misp-playbooks
MISP Playbooks
misp playbooks misp-playbooks cti cyber-security threat-intelligence
Language:Jupyter Notebook 174
MISP / MISP-maltego
Set of Maltego transforms to inferface with a MISP Threat Sharing instance, and also to explore the whole MITRE ATT&CK dataset.
misp maltego misp-maltego attack mitre-attack transform pivoting visualisation graph analysis threat-intelligence threat-intel
Language:Python 170
mthc
pe3zx / mthc
All-in-one bundle of MISP, TheHive and Cortex
misp thehive-project cortex threat-intelligence threat-hunting incident-response incident-management ioc-framework dfir thehive
169
davidonzo / Threat-Intel
Threat-Intel repository. API: https://github.com/davidonzo/apiosintDS
threat-intelligence cybersecurity incident-response-service misp stix stix2 taxii taxii2 cybox misp-feed threat-intel malware-analisys-lab osint
Language:Python 148
tylabs / dovehawk
Dovehawk is a Zeek module that automatically imports MISP indicators and reports Sightings
bro-ids misp misp-sightings threat-hunting threat-intelligence zeek zeek-ids
Language:Zeek 121
MISP / docker-misp
Automated Docker MISP container - Malware Information Sharing Platform and Threat Sharing
misp dockerhub security information-security threat-sharing malware malware-analysis threat-intelligence
Language:Dockerfile 105
MISP / misp-objects
Definition, description and relationship types of MISP objects
misp misp-objects information-exchange information-sharing
Language:Python 91
cerebrate-project / cerebrate
Cerebrate is an open-source platform meant to act as a trusted contact information provider and interconnection orchestrator for other security tools.
misp cerebrate-project security-automation cerebrate information-sharing
Language:PHP 83
MISP / MISP-Taxii-Server
An OpenTAXII Configuration for MISP
misp taxii-server taxii-hooks information-exchange information-sharing stix
Language:Python 80
sigmai
0xThiebaut / sigmai
Import specific data sources into the Sigma generic and open signature format.
security monitoring siem logging signatures ids misp sigma
Language:Go 77
SyntheticSun
jonrau1 / SyntheticSun
SyntheticSun is a defense-in-depth security automation and monitoring framework which utilizes threat intelligence, machine learning, managed AWS security services and, serverless technologies to continuously prevent, detect and respond to threats.
threat-intelligence machine-learning anomaly-detection aws-security aws-serverless serverless automation geolocation threat-detection guardduty security-automation security-tools aws sagemaker incident-response kibana elasticsearch data-science data-visualization misp
Language:Python 76
MISP / misp-cloud
misp-cloud - Cloud-ready images of MISP
misp misp-cloud
Language:Shell 72
conix-security / BTG
BTG's purpose is to make fast and efficient search on IOC
ioc misp virustotal
Language:Python 70
MISP / mail_to_misp
Connect your mail client/infrastructure to MISP in order to create events based on the information contained within mails.
misp misp-api threat-hunting threat-intelligence threatintel
Language:Python 69