misp

There are 11 repositories under misp topic.

MISP / MISP
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
misp threat-sharing threat-hunting threatintel malware-analysis stix information-exchange fraud-management security cti cybersecurity fraud-detection fraud-prevention threat-analysis information-security information-sharing threat-intelligence threat-intelligence-platform intelligence threat-intel
Language:PHP 4977
TheHive
TheHive-Project / TheHive
TheHive: a Scalable, Open Source and Free Security Incident Response Platform
misp security-incidents analyzer iocs thehive digital-forensics incident-response rest api scala investigations dfir free open-source platform cortex agplv3 orchestration incident-management incident-response-tooling
Language:Scala 3214
eset / malware-ioc
Indicators of Compromises (IOC) of our various investigations
ioc malware yara misp
Language:YARA 1503
ThePhish
emalderson / ThePhish
ThePhish: an automated phishing email analysis tool
email detection malware phishing cybersecurity misp thehive thehive4 thehive4py indicators-of-compromise cyberdefense phishing-detection python incident-response free digital-forensics threat-intelligence webapp attack script
Language:Python 1043
Bert-JanP / Hunting-Queries-Detection-Rules
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
azure defender-for-endpoint dfir kql sentinel threat-hunting vulnerability-management zero-day blueteam cybersecurity mde mdi infosec security misp
Language:Python 995
Watcher
thalesgroup-cert / Watcher
Watcher - Open Source Cybersecurity Threat Hunting Platform. Developed with Django & React JS.
cybersecurity threat-hunting django reactjs rss-bridge misp thehive security incident-response threat-detection threat-intelligence nltk watcher certificate-transparency certstream osint osint-python webapp monitoring phishing
Language:Python 794
InQuest / ThreatIngestor
Extract and aggregate threat intelligence.
dfir fraud-detection indicators-of-compromise intelligence-gathering ioc malware-research misp osint security-tools soar threat-analysis threat-feeds threat-hunting threat-intelligence threat-intelligence-platform threat-sharing threatintel yara
Language:Python 781
MISP / misp-galaxy
Clusters and elements to attach to MISP events or attributes (like threat actors)
adversaries adversary-groups attack-patternon classification information-exchange malware misp misp-galaxy mitre-adversarial-tactics stix threat-actors threat-hunting threat-intelligence
Language:Python 481
MISP / misp-warninglists
Warning lists to inform users of MISP about potential false-positives or other information in indicators
dfir false-positive misp misp-warninglists network-forensics threat-intelligence
Language:Python 475
Bert-JanP / Open-Source-Threat-Intel-Feeds
This repository contains Open Source freely usable Threat Intel feeds that can be used without additional requirements. Contains multiple types such as IP, URL, CVE and Hash.
c2 ioc iocfeed malware misp phishing threat-hunting threat-intelligence
Language:Python 449
MISP / PyMISP
Python library using the MISP Rest API
api api-client misp threat-sharing threatintel
Language:Python 420
TheHiveDocs
TheHive-Project / TheHiveDocs
Documentation of TheHive
administration-guide analyst analyzer api cortex dfir digital-forensics documentation free free-software incident-response iocs misp open-source platform rest security-incidents thehive thehive-project
389
V1D1AN / S1EM
This project is a SIEM with SIRP and Threat Intel, all in one.
kibana elasticsearch logstash filebeat suricata zeek opencti misp malware sigma thehive docker cortex arkime mwdb n8n zircolite yara velociraptor
Language:Shell 386
cloudtracer / ThreatPinchLookup
Documentation and Sharing Repository for ThreatPinch Lookup Chrome & Firefox Extension
passivetotal cve osint threatintel threat-hunting chrome-extension security virustotal threatminer circl alienvault dfir censys misp cert whois incident-response shodan ibm-xforce threat-sharing
Language:HTML 333
MISP / misp-modules
Modules for expansion services, enrichment, import and export in MISP and other tools.
misp-modules misp expansion passivetotal domaintools passive-dns threat-intelligence osint cti enrichment
Language:Python 324
OpenCTI-Platform / connectors
OpenCTI Connectors
cybersecurity cti threat-intelligence misp mitre-attack
Language:Python 321
MISP / x_old_misp_docker
MISP Docker (XME edition)
misp misp-docker
Language:Shell 283
tenzir / threatbus
🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.
threat-intelligence threatintel threat-hunting ids zeek misp opencti opencti-connector sightings threat-bus threat-intelligence-data cif3 cif
Language:Python 255
MISP / misp-book
User guide of MISP
misp documentation misp-book information-exchange information-sharing
Language:Shell 242
coolacid / docker-misp
A (nearly) production ready Dockered MISP
misp docker security security-tools threat-sharing threat-intelligence
Language:Shell 226
awesome-lists
mthcht / awesome-lists
Security lists for SOC detections
blueteam hacktools keywords list offensive-security purpleteam redteam security soc awesome awesome-list awesome-lists cti ioc misp open-source
Language:PowerShell 202
MISP / misp-dashboard
A live dashboard for a real-time overview of threat intelligence from MISP instances
misp cybersecurity cyber-security threatintel threat-intelligence dashboard
Language:JavaScript 188
harvard-itsecurity / docker-misp
Automated Docker MISP container - Malware Information Sharing Platform and Threat Sharing
misp dockerhub security information-security threat-sharing malware malware-analysis threat-intelligence
Language:Dockerfile 173
mthc
pe3zx / mthc
All-in-one bundle of MISP, TheHive and Cortex
misp thehive-project cortex threat-intelligence threat-hunting incident-response incident-management ioc-framework dfir thehive
168
MISP / MISP-maltego
Set of Maltego transforms to inferface with a MISP Threat Sharing instance, and also to explore the whole MITRE ATT&CK dataset.
misp maltego misp-maltego attack mitre-attack transform pivoting visualisation graph analysis threat-intelligence threat-intel
Language:Python 165
MISP / misp-playbooks
MISP Playbooks
misp playbooks misp-playbooks cti cyber-security threat-intelligence
Language:Jupyter Notebook 151
davidonzo / Threat-Intel
Threat-Intel repository. API: https://github.com/davidonzo/apiosintDS
threat-intelligence cybersecurity incident-response-service misp stix stix2 taxii taxii2 cybox misp-feed threat-intel malware-analisys-lab osint
Language:Python 137
tylabs / dovehawk
Dovehawk is a Zeek module that automatically imports MISP indicators and reports Sightings
bro-ids misp misp-sightings threat-hunting threat-intelligence zeek zeek-ids
Language:Zeek 122
MISP / docker-misp
Automated Docker MISP container - Malware Information Sharing Platform and Threat Sharing
dockerhub information-security malware malware-analysis misp security threat-intelligence threat-sharing
Language:Dockerfile 102
MISP / misp-objects
Definition, description and relationship types of MISP objects
information-exchange information-sharing misp misp-objects
Language:Python 88
cerebrate-project / cerebrate
Cerebrate is an open-source platform meant to act as a trusted contact information provider and interconnection orchestrator for other security tools.
cerebrate cerebrate-project information-sharing misp security-automation
Language:PHP 79
MISP / MISP-Taxii-Server
An OpenTAXII Configuration for MISP
misp taxii-server taxii-hooks information-exchange information-sharing stix
Language:Python 79
sigmai
0xThiebaut / sigmai
Import specific data sources into the Sigma generic and open signature format.
security monitoring siem logging signatures ids misp sigma
Language:Go 75
SyntheticSun
jonrau1 / SyntheticSun
SyntheticSun is a defense-in-depth security automation and monitoring framework which utilizes threat intelligence, machine learning, managed AWS security services and, serverless technologies to continuously prevent, detect and respond to threats.
threat-intelligence machine-learning anomaly-detection aws-security aws-serverless serverless automation geolocation threat-detection guardduty security-automation security-tools aws sagemaker incident-response kibana elasticsearch data-science data-visualization misp
Language:Python 74
conix-security / BTG
BTG's purpose is to make fast and efficient search on IOC
ioc misp virustotal
Language:Python 71
MISP / misp-cloud
misp-cloud - Cloud-ready images of MISP
misp misp-cloud
Language:Shell 69