misp

There are 12 repositories under misp topic.

MISP / MISP
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
cti cybersecurity fraud-detection fraud-management fraud-prevention information-exchange information-security information-sharing intelligence malware-analysis misp security stix threat-analysis threat-hunting threat-intel threat-intelligence threat-intelligence-platform threat-sharing threatintel
Language:PHP 5212
TheHive
TheHive-Project / TheHive
TheHive: a Scalable, Open Source and Free Security Incident Response Platform
agplv3 analyzer api cortex dfir digital-forensics free incident-management incident-response incident-response-tooling investigations iocs misp open-source orchestration platform rest scala security-incidents thehive
Language:Scala 3337
eset / malware-ioc
Indicators of Compromises (IOC) of our various investigations
ioc malware misp yara
Language:YARA 1591
Bert-JanP / Hunting-Queries-Detection-Rules
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
azure blueteam cybersecurity defender-for-endpoint dfir infosec kql mde mdi misp security sentinel threat-hunting vulnerability-management zero-day
Language:Python 1136
ThePhish
emalderson / ThePhish
ThePhish: an automated phishing email analysis tool
email detection malware phishing cybersecurity misp thehive thehive4 thehive4py indicators-of-compromise cyberdefense phishing-detection python incident-response free digital-forensics threat-intelligence webapp attack script
Language:Python 1103
Watcher
thalesgroup-cert / Watcher
Watcher - Open Source Cybersecurity Threat Hunting Platform. Developed with Django & React JS.
certificate-transparency certstream cybersecurity django incident-response misp monitoring nltk osint osint-python phishing reactjs rss-bridge security thehive threat-detection threat-hunting threat-intelligence watcher webapp
Language:Python 845
InQuest / ThreatIngestor
Extract and aggregate threat intelligence.
dfir fraud-detection indicators-of-compromise intelligence-gathering ioc malware-research misp osint security-tools soar threat-analysis threat-feeds threat-hunting threat-intelligence threat-intelligence-platform threat-sharing threatintel yara
Language:Python 813
Bert-JanP / Open-Source-Threat-Intel-Feeds
This repository contains Open Source freely usable Threat Intel feeds that can be used without additional requirements. Contains multiple types such as IP, URL, CVE and Hash.
c2 misp threat-intelligence threat-hunting malware phishing ioc iocfeed
Language:Python 537
MISP / misp-galaxy
Clusters and elements to attach to MISP events or attributes (like threat actors)
threat-hunting information-exchange misp classification misp-galaxy threat-actors stix threat-intelligence adversaries mitre-adversarial-tactics attack-patternon adversary-groups malware
Language:Python 511
MISP / misp-warninglists
Warning lists to inform users of MISP about potential false-positives or other information in indicators
dfir false-positive misp misp-warninglists network-forensics threat-intelligence
Language:Python 506
MISP / PyMISP
Python library using the MISP Rest API
misp api api-client threat-sharing threatintel
Language:Python 430
V1D1AN / S1EM
This project is a SIEM with SIRP and Threat Intel, all in one.
kibana elasticsearch logstash filebeat suricata zeek opencti misp malware sigma thehive docker cortex arkime mwdb n8n zircolite yara velociraptor
Language:Shell 402
TheHiveDocs
TheHive-Project / TheHiveDocs
Documentation of TheHive
misp security-incidents iocs thehive cortex administration-guide analyzer rest api incident-response digital-forensics analyst dfir free free-software documentation open-source platform thehive-project
392
OpenCTI-Platform / connectors
OpenCTI Connectors
cybersecurity cti threat-intelligence misp mitre-attack
Language:Python 356
cloudtracer / ThreatPinchLookup
Documentation and Sharing Repository for ThreatPinch Lookup Chrome & Firefox Extension
alienvault censys cert chrome-extension circl cve dfir ibm-xforce incident-response misp osint passivetotal security shodan threat-hunting threat-sharing threatintel threatminer virustotal whois
Language:HTML 340
MISP / misp-modules
Modules for expansion services, enrichment, import and export in MISP and other tools.
misp-modules misp expansion passivetotal domaintools passive-dns threat-intelligence osint cti enrichment
Language:Python 336
MISP / x_old_misp_docker
MISP Docker (XME edition)
misp-docker misp
Language:Shell 283
tenzir / threatbus
🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.
threat-intelligence threatintel threat-hunting ids zeek misp opencti opencti-connector sightings threat-bus threat-intelligence-data cif3 cif
Language:Python 256
MISP / misp-book
User guide of MISP
misp documentation misp-book information-exchange information-sharing
Language:Shell 253
coolacid / docker-misp
A (nearly) production ready Dockered MISP
docker misp security security-tools threat-intelligence threat-sharing
Language:Shell 227
MISP / misp-dashboard
A live dashboard for a real-time overview of threat intelligence from MISP instances
misp cybersecurity cyber-security threatintel threat-intelligence dashboard
Language:JavaScript 192
harvard-itsecurity / docker-misp
Automated Docker MISP container - Malware Information Sharing Platform and Threat Sharing
misp dockerhub security information-security threat-sharing malware malware-analysis threat-intelligence
Language:Dockerfile 174
mthc
pe3zx / mthc
All-in-one bundle of MISP, TheHive and Cortex
misp thehive-project cortex threat-intelligence threat-hunting incident-response incident-management ioc-framework dfir thehive
170
MISP / MISP-maltego
Set of Maltego transforms to inferface with a MISP Threat Sharing instance, and also to explore the whole MITRE ATT&CK dataset.
misp maltego misp-maltego attack mitre-attack transform pivoting visualisation graph analysis threat-intelligence threat-intel
Language:Python 166
MISP / misp-playbooks
MISP Playbooks
misp playbooks misp-playbooks cti cyber-security threat-intelligence
Language:Jupyter Notebook 163
davidonzo / Threat-Intel
Threat-Intel repository. API: https://github.com/davidonzo/apiosintDS
threat-intelligence cybersecurity incident-response-service misp stix stix2 taxii taxii2 cybox misp-feed threat-intel malware-analisys-lab osint
Language:Python 145
tylabs / dovehawk
Dovehawk is a Zeek module that automatically imports MISP indicators and reports Sightings
misp bro-ids threat-hunting threat-intelligence zeek-ids zeek misp-sightings
Language:Zeek 121
MISP / docker-misp
Automated Docker MISP container - Malware Information Sharing Platform and Threat Sharing
misp dockerhub security information-security threat-sharing malware malware-analysis threat-intelligence
Language:Dockerfile 104
MISP / misp-objects
Definition, description and relationship types of MISP objects
misp misp-objects information-exchange information-sharing
Language:Python 91
cerebrate-project / cerebrate
Cerebrate is an open-source platform meant to act as a trusted contact information provider and interconnection orchestrator for other security tools.
misp cerebrate-project security-automation cerebrate information-sharing
Language:PHP 82
MISP / MISP-Taxii-Server
An OpenTAXII Configuration for MISP
misp taxii-server taxii-hooks information-exchange information-sharing stix
Language:Python 79
sigmai
0xThiebaut / sigmai
Import specific data sources into the Sigma generic and open signature format.
security monitoring siem logging signatures ids misp sigma
Language:Go 77
SyntheticSun
jonrau1 / SyntheticSun
SyntheticSun is a defense-in-depth security automation and monitoring framework which utilizes threat intelligence, machine learning, managed AWS security services and, serverless technologies to continuously prevent, detect and respond to threats.
anomaly-detection automation aws aws-security aws-serverless data-science data-visualization elasticsearch geolocation guardduty incident-response kibana machine-learning misp sagemaker security-automation security-tools serverless threat-detection threat-intelligence
Language:Python 76
conix-security / BTG
BTG's purpose is to make fast and efficient search on IOC
ioc misp virustotal
Language:Python 70
MISP / misp-cloud
misp-cloud - Cloud-ready images of MISP
misp misp-cloud
Language:Shell 70
MISP / mail_to_misp
Connect your mail client/infrastructure to MISP in order to create events based on the information contained within mails.
misp misp-api threat-hunting threat-intelligence threatintel
Language:Python 67