threat-intelligence

There are 162 repositories under threat-intelligence topic.

smicallef / spiderfoot
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
footprinting osint threatintel python infosec intelligence-gathering osint-reconnaissance pentesting threat-intelligence security-tools information-gathering cybersecurity cti osint-framework attacksurface osint-tool hacking information-security recon
Language:Python 15326
rshipp / awesome-malware-analysis
Defund the Police.
analysis-framework automated-analysis awesome awesome-list chinese chinese-translation domain-analysis drop-ice dynamic-analysis list malware-analysis malware-collection malware-research malware-samples network-traffic static-analysis threat-intelligence threat-sharing threatintel
12983
edoardottt / awesome-hacker-search-engines
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
awesome awesome-list hacking search-engine osint awesome-lists dns hacking-tools exploit security security-tools wifi-network bugbounty osint-tool vulnerabilities redteam redteaming cve hacktoberfest threat-intelligence
Language:Shell 9351
blacklanternsecurity / bbot
The recursive internet scanner for hackers. 🧡
hacking neo4j osint osint-framework python subdomain-enumeration automation recon cli scanner bugbounty pentesting recursion subdomain-scanner subdomains asm attack-surface-management threat-intelligence threatintel easm
Language:Python 8964
OpenCTI-Platform / opencti
Open Cyber Threat Intelligence Platform
cyber cti threat-intelligence security intelligence osint cybersecurity
Language:TypeScript 7747
MISP / MISP
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
cti cybersecurity fraud-detection fraud-management fraud-prevention information-exchange information-security information-sharing intelligence malware-analysis misp security stix threat-analysis threat-hunting threat-intel threat-intelligence threat-intelligence-platform threat-sharing threatintel
Language:PHP 5917
capa
mandiant / capa
The FLARE team's open-source tool to identify capabilities in executable files.
malware-analysis reverse-engineering binary-analysis threat-intelligence gsoc-2025
Language:Python 5515
elceef / dnstwist
Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation
phishing typosquatting domains dns osint idn fuzzing threat-hunting homograph-attack scanner threat-intelligence homoglyph
Language:Python 5372
devsecops / awesome-devsecops
An authoritative list of awesome devsecops tools with the help from community experiments and contributions.
devsecops threat-intelligence devops podcast
5058
fastfire / deepdarkCTI
Collection of Cyber Threat Intelligence sources from the deep and dark web
cti cyberhunter darkweb deepweb threat-intelligence
4988
IntelOwl
intelowlproject / IntelOwl
IntelOwl: manage your Threat Intelligence at scale
security-tools python threat-intelligence ioc incident-response cyber-threat-intelligence enrichment honeynet osint osint-python threatintel malware-analysis malware-analyzer intel-owl threat-hunting hacktoberfest cyber-security cybersecurity threathunting dfir
Language:Python 4309
teler
teler-sh / teler
Real-time HTTP Intrusion Detection
threat-hunting threat-intelligence ids intrusion-detection-system threat-analyzer go golang intrusion-detection intrusion threat threat-rules analyze-logs iocs logs log-analyzer log
Language:Go 3064
Neo23x0 / signature-base
YARA signature and IOC database for my scanners and tools
anti-virus dfir hash ioc scanner signature threat-hunting threat-intelligence yara yara-rules
Language:YARA 2735
Digital-Forensics-Guide
mikeroyal / Digital-Forensics-Guide
Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.
digitalforensics digitalforensicreadiness forensics security forensics-tools digital-forensics threat-intelligence intrusion-detection mitre-attack detection-engineering network-security offensive-security cyber-security port-scanning siem alerting forensic-analysis forensics-investigations osint dfir
Language:Python 2248
osintbrazuca / osint-brazuca
Repositório criado com intuito de reunir informações, fontes(websites/portais) e tricks de OSINT dentro do contexto Brasil.
osint brasil hacking threat-intelligence threat-hunting threatintel
1797
x0rz / phishing_catcher
Phishing catcher using Certstream
certificate-transparency osint phishing threat-intelligence threatintel
Language:Python 1758
AmnestyTech / investigations
Indicators of Compromise from Amnesty International's cyber investigations
forensics spyware threat-hunting threat-intelligence
Language:Python 1618
ninoseki / mitaka
A browser extension for OSINT search
chrome-extension security threat-intelligence osint
Language:TypeScript 1567
nshalabi / SysmonTools
Utilities for Sysmon
logging monitoring netsec sysinternals sysmon threat-hunting threat-intelligence threatintel windows
1512
trickest / inventory
Asset inventory of over 800 public bug bounty programs.
bug-bounty bugbounty bugbountytips fuzzing hacking infosec osint osint-resources osint-tool penetration-testing pentest-tool pentesting recon reconnaissance red-team security security-tools software-security threat-intelligence
Language:Shell 1350
Te-k / harpoon
CLI tool for open source and threat intelligence
osint osint-framework threat-intelligence threatintel
Language:Python 1240
ThePhish
emalderson / ThePhish
ThePhish: an automated phishing email analysis tool
attack cyberdefense cybersecurity detection digital-forensics email free incident-response indicators-of-compromise malware misp phishing phishing-detection python script thehive thehive4 thehive4py threat-intelligence webapp
Language:Python 1205
BushidoUK / Ransomware-Tool-Matrix
A resource containing all the tools each ransomware gangs uses
cti cybersecurity detection-engineering hacking osint ransomware threat-hunting threat-intelligence threatintel
1194
tomchop / malcom
Malcom - Malware Communications Analyzer
dfir infosec malware malware-analysis network-traffic pcap threat-intelligence
Language:Python 1158
awesome-lists
mthcht / awesome-lists
Awesome Security lists for SOC/CERT/CTI
blueteam hacktools redteam security soc awesome-list cti ioc blueteam-tools detection detection-engineering dfir incident-response iocs ir siem threat-hunting threat-intelligence ransomware rmm
Language:YARA 1108
alvin-tosh / Malware-Exhibit
🚀🚀 This is a 🎇🔥 REAL WORLD🔥 🎇 Malware Collection I have Compiled & analysed by researchers🔥 to understand more about Malware threats😈, analysis and mitigation🧐.
cryptography cybersecurity encryption-decryption ethical-hacking infosec keylogger malware-analysis malware-research ransomware stealer-windows threat-hunting threat-intelligence trojan virus malware notpetya-malware petya spyware wannacry-ransomware apt
Language:Assembly 1104
toolswatch / vFeed
The Correlated CVE Vulnerability And Threat Intelligence Database API
cve oval threat-intelligence-database python vfeed cwe capec scap vulnerability-databases vulnerability-detection vulnerability-database-entry vulnerability-identification threat intelligence-gathering exploits vulnerability vulnerability-scanners common-vulnerability-exposure threat-intelligence threatintel
Language:Python 948
DaProfiler
daprofiler / DaProfiler
DaProfiler is an OSINT tool allowing you to collect certain information about yourself in order to rectify by rgpd requests the traces you may have left on the net. DaProfiler is indeed able to recover: Addresses, Social media accounts, e-mail addresses, mobile / landline number, jobs.
osint social-media social-network instagram email facebook skype python osint-python osint-tools threat-intelligence tracelabs intelligence information-gathering emails france person-search
Language:Python 945
osintbrazuca / osint-brazuca-regex
Repositório criado com intuito de reunir expressões regulares dentro do contexto Brasil
brasil brazil hacking osint regex threat-hunting threat-intelligence
937
curated-intel / Ukraine-Cyber-Operations
Curated Intelligence is working with analysts from around the world to provide useful information to organisations in Ukraine looking for additional free threat intelligence. Slava Ukraini. Glory to Ukraine.
ukraine osint cti threat-intelligence iocs threat-hunting yara malware
Language:YARA 922
Watcher
thalesgroup-cert / Watcher
Watcher - Open Source Cybersecurity Threat Hunting Platform. Developed with Django & React JS.
certificate-transparency certstream cybersecurity django incident-response misp monitoring nltk osint osint-python phishing reactjs rss-bridge security thehive threat-detection threat-hunting threat-intelligence watcher webapp
Language:Python 906
ninoseki / mihari
A query aggregator for OSINT based threat hunting
threat-hunting threat-intelligence osint
Language:Ruby 887
InQuest / ThreatIngestor
Extract and aggregate threat intelligence.
ioc indicators-of-compromise threatintel threat-intelligence osint dfir malware-research security-tools threat-sharing threat-feeds threat-hunting misp fraud-detection threat-analysis intelligence-gathering threat-intelligence-platform yara soar
Language:Python 882
A3sal0n / CyberThreatHunting
A collection of resources for Threat Hunters
threat-hunting dfir cybersecurity incident-response threat-intelligence
Language:Python 881
opensquat
atenreiro / opensquat
The openSquat is an open-source tool for detecting domain look-alikes by searching for newly registered domains that might be impersonating legit domains and brands.
blue-team cybersecurity cybersquatting domain-name domain-squatting homograph-attack infosec malware osint phishing phishing-detection phishing-domains python scanner security-tools threat-hunting threat-intelligence typosquatting
Language:Python 876
ion-storm / sysmon-config
Advanced Sysmon ATT&CK configuration focusing on Detecting the Most Techniques per Data source in MITRE ATT&CK, Provide Visibility into Forensic Artifact Events for UEBA, Detect Exploitation events with wide CVE Coverage, and Risk Scoring of CVE, UEBA, Forensic, and MITRE ATT&CK Events.
sysmon threatintel threat-hunting netsec sysinternals logging graylog graylog-plugin dfir threat-intelligence threat-sharing threat-analysis mitre-attack digitalforensics forensic-analysis forensicartifacts forensics siem sigma-rules humio
Language:PowerShell 797

threat-intelligence

smicallef / spiderfoot

rshipp / awesome-malware-analysis

edoardottt / awesome-hacker-search-engines

blacklanternsecurity / bbot

OpenCTI-Platform / opencti

MISP / MISP

mandiant / capa

elceef / dnstwist

devsecops / awesome-devsecops

fastfire / deepdarkCTI

intelowlproject / IntelOwl

teler-sh / teler

Neo23x0 / signature-base

mikeroyal / Digital-Forensics-Guide

osintbrazuca / osint-brazuca

x0rz / phishing_catcher

AmnestyTech / investigations

ninoseki / mitaka

nshalabi / SysmonTools

trickest / inventory

Te-k / harpoon

emalderson / ThePhish

BushidoUK / Ransomware-Tool-Matrix

tomchop / malcom

mthcht / awesome-lists

alvin-tosh / Malware-Exhibit

toolswatch / vFeed

daprofiler / DaProfiler

osintbrazuca / osint-brazuca-regex

curated-intel / Ukraine-Cyber-Operations

thalesgroup-cert / Watcher

ninoseki / mihari

InQuest / ThreatIngestor

A3sal0n / CyberThreatHunting

atenreiro / opensquat

ion-storm / sysmon-config