threat-analysis

There are 9 repositories under threat-analysis topic.

MISP / MISP
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
misp threat-sharing threat-hunting threatintel malware-analysis stix information-exchange fraud-management security cti cybersecurity fraud-detection fraud-prevention threat-analysis information-security information-sharing threat-intelligence threat-intelligence-platform intelligence threat-intel
Language:PHP 4976
cowrie / cowrie
Cowrie SSH/Telnet Honeypot https://cowrie.readthedocs.io
cowrie honeypot ssh telnet security kippo cowrie-ssh telnet-honeypot sftp scp attacker threat-analysis threat-sharing threatintel decoy deception
Language:Python 4908
ThreatMapper
deepfence / ThreatMapper
Open source cloud native security observability platform. Linux, K8s, AWS Fargate and more.
cloud-native vulnerability-management threat-analysis devsecops secops registry-scanning security-tools cwpp observability cloudsecurity vulnerability-scanners vulnerability-detection scanning-tool cnapp compliance containers cspm devops kubernetes hacktoberfest
Language:TypeScript 4631
CYB3RMX / Qu1cksc0pe
All-in-One malware analysis tool.
linux malware-analysis python3 static-analysis virustotal security-tools termux elf exe windows packer suspicious-files malware threat-analysis apk osx strings antivirus ransomware all-in-one
Language:YARA 1110
InQuest / ThreatIngestor
Extract and aggregate threat intelligence.
ioc indicators-of-compromise threatintel threat-intelligence osint dfir malware-research security-tools threat-sharing threat-feeds threat-hunting misp fraud-detection threat-analysis intelligence-gathering threat-intelligence-platform yara soar
Language:Python 781
ion-storm / sysmon-config
Advanced Sysmon ATT&CK configuration focusing on Detecting the Most Techniques per Data source in MITRE ATT&CK, Provide Visibility into Forensic Artifact Events for UEBA, Detect Exploitation events with wide CVE Coverage, and Risk Scoring of CVE, UEBA, Forensic, and MITRE ATT&CK Events.
sysmon threatintel threat-hunting netsec sysinternals logging graylog graylog-plugin dfir threat-intelligence threat-sharing threat-analysis mitre-attack digitalforensics forensic-analysis forensicartifacts forensics siem sigma-rules humio
Language:PowerShell 749
satan1a / TheRoadOfSO
学习安全运营的记录 | The knowledge base of security operation
security-operations cybersecurity security-analysis threat-analysis security-operation soc wiki knowledge-base
Language:HTML 617
TalEliyahu / Threat_Model_Examples
Collection of Threat Models
risk-assessment threat threat-analysis threat-modeling
338
zdhenard42 / SOC-Multitool
A powerful and user-friendly browser extension that streamlines investigations for security professionals.
browser-extension chrome-extension cybersecurity threat-analysis threat-hunting threat-intelligence
Language:JavaScript 309
ecstatic-nobel / OSweep
Don't Just Search OSINT. Sweep It.
osint splunk cybersecurity python threat-intelligence threat-hunting threat-analysis malware-analysis pivoting certificate-transparency cybercrime ransomware scanners threatcrowd urlhaus urlscan-io
Language:Python 300
t4d / PhishingKitHunter
Find phishing kits which use your brand/organization's files and image.
phishing-sites threat-hunting fraud-detection fraud-prevention phishing-attacks threat-intelligence security threat-analysis phishing
Language:Python 222
Graylog2 / graylog-plugin-threatintel
Graylog Processing Pipeline functions to enrich log messages with IoC information from threat intelligence databases
graylog threat otx whois-information abuse graylog-plugin threatintel threat-score threat-analysis spamhaus whois whois-lookup
Language:Java 145
jackaduma / SecBERT
pretrained BERT model for cyber security text, learned CyberSecurity Knowledge
apt attention bert bert-embeddings cyber-security cyber-threat-intelligence cybersecurity deep-learning-security deeplearning machine-learning-security nlp nlp-machine-learning security security-automation threat-analysis threat-detection threat-hunting threat-intelligence transformer-encoder transformers
Language:Python 135
alvin-tosh / Infosec-and-Hacking-Scripts
🚀 This is a collection of hacking🔥 and pentesting 🧐 scripts to help with enumeration, OSINT, exploitation and post exploitation automated scripts to make hacking easier🌠. Have fun!😎
automation bash brute-force cybersecurity exploits hacking hacking-tool hash infosec osint-resources python threat-analysis threat-hunting threat-intelligence webhacking penetration-testing pentesting raspberry-pi security usb-rubber-ducky
Language:Python 131
ecstatic-nobel / Analyst-Arsenal
A toolkit for Security Researchers
osint cybersecurity python threat-intelligence threat-hunting threat-analysis malware-analysis certificate-transparency scanner threat-detection certstream webshell opendir defaced infosec
Language:Python 124
401trg / detections
This repository contains all public indicators identified by 401trg during the course of our investigations. It also includes relevant yara rules and ids signatures to detect these indicators.
401trg protectwise ioc indicators indicators-of-compromise threat-hunting threat-analysis verizon
Language:Python 121
CERTCC / Vulnerability-Data-Archive
With the hope that someone finds the data useful, we periodically publish an archive of almost all of the non-sensitive vulnerability information in our vulnerability reports database. See also https://github.com/CERTCC/Vulnerability-Data-Archive-Tools
vulnerability-data vulnerability vulnerability-notes cert vulnerability-report threat-intelligence threatintel threat-analysis threat cve
83
curated-intel / Threat-Actor-Profile-Guide
The Threat Actor Profile Guide for CTI Analysts
cti intelligence-analysis resources threat-actors threat-analysis threat-intelligence threatintel
83
jackaduma / ThreatReportExtractor
Extracting Attack Behavior from Threat Reports
nlp security threat-intelligence threat-analysis cybersecurity cyber-threat-intelligence advanced-persistent-threat deep-learning machine-learning machine-learning-algorithms deeplearning nlp-machine-learning nlp-parsing natural-language-processing graph-algorithms graph
Language:Python 73
CloudDefenseAI / falco_extended_rules
Curating Falco rules with MITRE ATT&CK Matrix
cloudsecurity devops devsecops kuberentes security cnapp cspm security-tools threat-analysis vulnerability-detection vulnerability-scanners falco malware threat threat-modeling container-security kubernetes-security malware-analysis workload-security zero-day
Language:Python 70
tatsuiman / malware-traffic-analysis.net
Download pcap files from http://www.malware-traffic-analysis.net/
pcap pcap-files threat-analysis samples
68
bobby-tablez / IP-Obfuscator
Hide an IP address in scripts using hex/decimal/octal conversions
antivirus-evasion ip malware obfuscation powershell threat-analysis
Language:PowerShell 54
jh00nbr / Phishruffus
Intelligent threat hunter and phishing servers
phishing phishing-servers python threat-intelligence threat-analysis
Language:Python 45
Truvis / Suricata_Threat-Hunting-Rules
Collection of Suricata rule sets that I use modified to my environments.
suricata suricata-rules suricata-rule snort snort-rules snort-rules-generate snort3 security threat-intelligence threat-hunting threat-detection threat-analysis threat-response threat-monitor threat-intel threat-grid network-security network-monitoring network-analysis security-awareness
36
ethansilvas / google-cybersecurity
Projects, notes, and write-ups I have done while completing the Google Cybersecurity Certificate
cybersecurity linux python risk-management sql threat-analysis
Language:Jupyter Notebook 32
danieleperera / SocAnalystArsenal
Quick SOC L1 ticket structure
threatintel threat-intelligence threat-analysis cybersecurity cybersecurity-incidents analysts analyst-reports ticket
Language:Python 31
AzAgarampur / PsForge
Process Hollowing demonstration & explanation
anti-detection malware threat-analysis trojan-malware windows
Language:C++ 28
paulveillard / cybersecurity-threat-detection
An ongoing & curated collection of awesome software best practices and remediation techniques, libraries and frameworks, E-books and videos, Technical guidelines and important resources about Threat Detection & Hunting.
threat-hunting threat-intelligence threat-modeling threat-response threat-detection cybersecurity security-tools security-vulnerability malware-analysis malware-detection malware-development encryption-decryption threat-analysis threat-blocker threat-detection-policy threat-explorer threat-monitor
27
security-union / going-fishing-with-my-raspberry-pi
raspberry-pi paper interaction-ssh attacker threat-analysis honeypot honey-pot
23
401trg / utilities
This repository contains tools used by 401trg.
401trg protectwise threat-hunting threat-analysis tools utilities verizon
Language:Python 18
trickest / packages
Automated compromise detection of the world's most popular packages
compromise-detection infosec package packages penetration-testing pentesting python-packages python-security security software-security threat-analysis threat-hunting threat-intelligence
16
TheWatchList
SCS-Labs / TheWatchList
Threat Feeds, Threat lists, and regular lists of known IP ranges and domains. It updates every 4 hours.
threatview threat-intelligence threatintel threatintelligence threat-sharing threat threat-hunting threat-analysis threat-response threat-detection cyber-threat-coalition lists
13
Heimdall-Framework / heimdall-framework
USB threat evaluation framework for Linux
security usb cybersecurity threat-analysis rpi python linux
Language:Python 11
xakepnz / STRIKEWRITER
Looks up details on a public IPV4 address against ip-info and blacklist-search sites. Providing a reputation check.
python-badip reputation threat-analysis threatintel threat-intelligence reputation-api badip blueteam security-tools security iplookup osint-python osint python3
Language:Python 11
MISP / misp-decaying-models
MISP decaying models
misp network-security threat-intelligence threatintel dfir threat-analysis
Language:Shell 10
wisepythagoras / honeyshell
An SSH honeypot written entirely in Go.
go golang ssh ssh-server ssh-honeypot honeypot honeypots infosec cybersecurity cyber-security information-security threatintel threat-intelligence threat-hunting threat-sharing threat-analysis threat-detection threat-intel
Language:Go 8

threat-analysis

MISP / MISP

cowrie / cowrie

deepfence / ThreatMapper

CYB3RMX / Qu1cksc0pe

InQuest / ThreatIngestor

ion-storm / sysmon-config

satan1a / TheRoadOfSO

TalEliyahu / Threat_Model_Examples

zdhenard42 / SOC-Multitool

ecstatic-nobel / OSweep

t4d / PhishingKitHunter

Graylog2 / graylog-plugin-threatintel

jackaduma / SecBERT

alvin-tosh / Infosec-and-Hacking-Scripts

ecstatic-nobel / Analyst-Arsenal

401trg / detections

CERTCC / Vulnerability-Data-Archive

curated-intel / Threat-Actor-Profile-Guide

jackaduma / ThreatReportExtractor

CloudDefenseAI / falco_extended_rules

tatsuiman / malware-traffic-analysis.net

bobby-tablez / IP-Obfuscator

jh00nbr / Phishruffus

Truvis / Suricata_Threat-Hunting-Rules

ethansilvas / google-cybersecurity

danieleperera / SocAnalystArsenal

AzAgarampur / PsForge

paulveillard / cybersecurity-threat-detection

security-union / going-fishing-with-my-raspberry-pi

401trg / utilities

trickest / packages

SCS-Labs / TheWatchList

Heimdall-Framework / heimdall-framework

xakepnz / STRIKEWRITER

MISP / misp-decaying-models

wisepythagoras / honeyshell