threat-intelligence

There are 155 repositories under threat-intelligence topic.

smicallef / spiderfoot
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
attacksurface cti cybersecurity footprinting hacking information-gathering information-security infosec intelligence-gathering osint osint-framework osint-reconnaissance osint-tool pentesting python recon security-tools threat-intelligence threatintel
Language:Python 13617
rshipp / awesome-malware-analysis
Defund the Police.
analysis-framework automated-analysis awesome awesome-list chinese chinese-translation domain-analysis drop-ice dynamic-analysis list malware-analysis malware-collection malware-research malware-samples network-traffic static-analysis threat-intelligence threat-sharing threatintel
12220
edoardottt / awesome-hacker-search-engines
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
awesome awesome-list hacking search-engine osint awesome-lists dns hacking-tools exploit security security-tools wifi-network bugbounty osint-tool vulnerabilities redteam redteaming cve hacktoberfest threat-intelligence
Language:Shell 8223
blacklanternsecurity / bbot
The recursive internet scanner for hackers. 🧡
asm attack-surface-management automation bugbounty cli easm hacking neo4j osint osint-framework pentesting python recon recursion scanner subdomain-enumeration subdomain-scanner subdomains threat-intelligence threatintel
Language:Python 7713
OpenCTI-Platform / opencti
Open Cyber Threat Intelligence Platform
cti cyber cybersecurity intelligence osint security threat-intelligence
Language:TypeScript 6780
MISP / MISP
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
cti cybersecurity fraud-detection fraud-management fraud-prevention information-exchange information-security information-sharing intelligence malware-analysis misp security stix threat-analysis threat-hunting threat-intel threat-intelligence threat-intelligence-platform threat-sharing threatintel
Language:PHP 5497
capa
mandiant / capa
The FLARE team's open-source tool to identify capabilities in executable files.
binary-analysis malware-analysis reverse-engineering threat-intelligence
Language:Python 5033
elceef / dnstwist
Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation
dns domains fuzzing homoglyph homograph-attack idn osint phishing scanner threat-hunting threat-intelligence typosquatting
Language:Python 5001
fastfire / deepdarkCTI
Collection of Cyber Threat Intelligence sources from the deep and dark web
cti cyberhunter darkweb deepweb threat-intelligence
4730
devsecops / awesome-devsecops
An authoritative list of awesome devsecops tools with the help from community experiments and contributions.
devops devsecops podcast threat-intelligence
4711
IntelOwl
intelowlproject / IntelOwl
IntelOwl: manage your Threat Intelligence at scale
cyber-security cyber-threat-intelligence cybersecurity dfir enrichment hacktoberfest honeynet incident-response intel-owl ioc malware-analysis malware-analyzer osint osint-python python security-tools threat-hunting threat-intelligence threathunting threatintel
Language:Python 3977
teler
teler-sh / teler
Real-time HTTP Intrusion Detection
analyze-logs go golang ids intrusion intrusion-detection intrusion-detection-system iocs log log-analyzer logs threat threat-analyzer threat-hunting threat-intelligence threat-rules
Language:Go 3034
Neo23x0 / signature-base
YARA signature and IOC database for my scanners and tools
anti-virus dfir hash ioc scanner signature threat-hunting threat-intelligence yara yara-rules
Language:YARA 2535
Digital-Forensics-Guide
mikeroyal / Digital-Forensics-Guide
Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.
digitalforensics digitalforensicreadiness forensics security forensics-tools digital-forensics threat-intelligence intrusion-detection mitre-attack detection-engineering network-security offensive-security cyber-security port-scanning siem alerting forensic-analysis forensics-investigations osint dfir
Language:Python 1727
x0rz / phishing_catcher
Phishing catcher using Certstream
certificate-transparency osint phishing threat-intelligence threatintel
Language:Python 1727
osintbrazuca / osint-brazuca
Repositório criado com intuito de reunir informações, fontes(websites/portais) e tricks de OSINT dentro do contexto Brasil.
brasil hacking osint threat-hunting threat-intelligence threatintel
1718
AmnestyTech / investigations
Indicators of Compromise from Amnesty International's cyber investigations
forensics spyware threat-hunting threat-intelligence
Language:Python 1579
ninoseki / mitaka
A browser extension for OSINT search
chrome-extension osint security threat-intelligence
Language:TypeScript 1517
nshalabi / SysmonTools
Utilities for Sysmon
logging monitoring netsec sysinternals sysmon threat-hunting threat-intelligence threatintel windows
1499
trickest / inventory
Asset inventory of over 800 public bug bounty programs.
bug-bounty bugbounty bugbountytips fuzzing hacking infosec osint osint-resources osint-tool penetration-testing pentest-tool pentesting recon reconnaissance red-team security security-tools software-security threat-intelligence
Language:Shell 1313
Te-k / harpoon
CLI tool for open source and threat intelligence
osint osint-framework threat-intelligence threatintel
Language:Python 1188
ThePhish
emalderson / ThePhish
ThePhish: an automated phishing email analysis tool
email detection malware phishing cybersecurity misp thehive thehive4 thehive4py indicators-of-compromise cyberdefense phishing-detection python incident-response free digital-forensics threat-intelligence webapp attack script
Language:Python 1179
tomchop / malcom
Malcom - Malware Communications Analyzer
dfir infosec malware malware-analysis network-traffic pcap threat-intelligence
Language:Python 1159
alvin-tosh / Malware-Exhibit
🚀🚀 This is a 🎇🔥 REAL WORLD🔥 🎇 Malware Collection I have Compiled & analysed by researchers🔥 to understand more about Malware threats😈, analysis and mitigation🧐.
apt cryptography cybersecurity encryption-decryption ethical-hacking infosec keylogger malware malware-analysis malware-research notpetya-malware petya ransomware spyware stealer-windows threat-hunting threat-intelligence trojan virus wannacry-ransomware
Language:Assembly 1026
toolswatch / vFeed
The Correlated CVE Vulnerability And Threat Intelligence Database API
capec common-vulnerability-exposure cve cwe exploits intelligence-gathering oval python scap threat threat-intelligence threat-intelligence-database threatintel vfeed vulnerability vulnerability-database-entry vulnerability-databases vulnerability-detection vulnerability-identification vulnerability-scanners
Language:Python 937
osintbrazuca / osint-brazuca-regex
Repositório criado com intuito de reunir expressões regulares dentro do contexto Brasil
brasil brazil hacking osint regex threat-hunting threat-intelligence
931
curated-intel / Ukraine-Cyber-Operations
Curated Intelligence is working with analysts from around the world to provide useful information to organisations in Ukraine looking for additional free threat intelligence. Slava Ukraini. Glory to Ukraine.
cti iocs malware osint threat-hunting threat-intelligence ukraine yara
Language:YARA 919
BushidoUK / Ransomware-Tool-Matrix
A resource containing all the tools each ransomware gangs uses
cti cybersecurity detection-engineering hacking osint ransomware threat-hunting threat-intelligence threatintel
897
Watcher
thalesgroup-cert / Watcher
Watcher - Open Source Cybersecurity Threat Hunting Platform. Developed with Django & React JS.
certificate-transparency certstream cybersecurity django incident-response misp monitoring nltk osint osint-python phishing reactjs rss-bridge security thehive threat-detection threat-hunting threat-intelligence watcher webapp
Language:Python 878
DaProfiler
daprofiler / DaProfiler
DaProfiler is an OSINT tool allowing you to collect certain information about yourself in order to rectify by rgpd requests the traces you may have left on the net. DaProfiler is indeed able to recover: Addresses, Social media accounts, e-mail addresses, mobile / landline number, jobs.
osint social-media social-network instagram email facebook skype python osint-python osint-tools threat-intelligence tracelabs intelligence information-gathering emails france person-search
Language:Python 877
ninoseki / mihari
A query aggregator for OSINT based threat hunting
osint threat-hunting threat-intelligence
Language:Ruby 876
A3sal0n / CyberThreatHunting
A collection of resources for Threat Hunters
cybersecurity dfir incident-response threat-hunting threat-intelligence
Language:Python 872
InQuest / ThreatIngestor
Extract and aggregate threat intelligence.
dfir fraud-detection indicators-of-compromise intelligence-gathering ioc malware-research misp osint security-tools soar threat-analysis threat-feeds threat-hunting threat-intelligence threat-intelligence-platform threat-sharing threatintel yara
Language:Python 840
awesome-lists
mthcht / awesome-lists
Awesome Security lists for SOC/CERT/CTI
blueteam hacktools redteam security soc awesome-list cti ioc blueteam-tools detection detection-engineering dfir incident-response iocs ir siem threat-hunting threat-intelligence ransomware rmm
Language:Python 818
ion-storm / sysmon-config
Advanced Sysmon ATT&CK configuration focusing on Detecting the Most Techniques per Data source in MITRE ATT&CK, Provide Visibility into Forensic Artifact Events for UEBA, Detect Exploitation events with wide CVE Coverage, and Risk Scoring of CVE, UEBA, Forensic, and MITRE ATT&CK Events.
sysmon threatintel threat-hunting netsec sysinternals logging graylog graylog-plugin dfir threat-intelligence threat-sharing threat-analysis mitre-attack digitalforensics forensic-analysis forensicartifacts forensics siem sigma-rules humio
Language:PowerShell 788
opensquat
atenreiro / opensquat
The openSquat is an open-source tool for detecting domain look-alikes by searching for newly registered domains that might be impersonating legit domains and brands.
blue-team cybersecurity cybersquatting domain-name domain-squatting homograph-attack infosec malware osint phishing phishing-detection phishing-domains python scanner security-tools threat-hunting threat-intelligence typosquatting
Language:Python 754

threat-intelligence

smicallef / spiderfoot

rshipp / awesome-malware-analysis

edoardottt / awesome-hacker-search-engines

blacklanternsecurity / bbot

OpenCTI-Platform / opencti

MISP / MISP

mandiant / capa

elceef / dnstwist

fastfire / deepdarkCTI

devsecops / awesome-devsecops

intelowlproject / IntelOwl

teler-sh / teler

Neo23x0 / signature-base

mikeroyal / Digital-Forensics-Guide

x0rz / phishing_catcher

osintbrazuca / osint-brazuca

AmnestyTech / investigations

ninoseki / mitaka

nshalabi / SysmonTools

trickest / inventory

Te-k / harpoon

emalderson / ThePhish

tomchop / malcom

alvin-tosh / Malware-Exhibit

toolswatch / vFeed

osintbrazuca / osint-brazuca-regex

curated-intel / Ukraine-Cyber-Operations

BushidoUK / Ransomware-Tool-Matrix

thalesgroup-cert / Watcher

daprofiler / DaProfiler

ninoseki / mihari

A3sal0n / CyberThreatHunting

InQuest / ThreatIngestor

mthcht / awesome-lists

ion-storm / sysmon-config

atenreiro / opensquat