threat-intelligence

There are 139 repositories under threat-intelligence topic.

smicallef / spiderfoot
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
footprinting osint threatintel python infosec intelligence-gathering osint-reconnaissance pentesting threat-intelligence security-tools information-gathering cybersecurity cti osint-framework attacksurface osint-tool hacking information-security recon
Language:Python 11840
rshipp / awesome-malware-analysis
Defund the Police.
analysis-framework automated-analysis awesome awesome-list chinese chinese-translation domain-analysis drop-ice dynamic-analysis list malware-analysis malware-collection malware-research malware-samples network-traffic static-analysis threat-intelligence threat-sharing threatintel
11120
MISP / MISP
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
misp threat-sharing threat-hunting threatintel malware-analysis stix information-exchange fraud-management security cti cybersecurity fraud-detection fraud-prevention threat-analysis information-security information-sharing threat-intelligence threat-intelligence-platform intelligence threat-intel
Language:PHP 5022
OpenCTI-Platform / opencti
Open Cyber Threat Intelligence Platform
cti cyber cybersecurity intelligence osint security threat-intelligence
Language:TypeScript 4781
elceef / dnstwist
Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation
phishing typosquatting domains dns osint idn fuzzing threat-hunting homograph-attack scanner threat-intelligence homoglyph
Language:Python 4584
devsecops / awesome-devsecops
An authoritative list of awesome devsecops tools with the help from community experiments and contributions.
devsecops threat-intelligence devops podcast
4415
fastfire / deepdarkCTI
Collection of Cyber Threat Intelligence sources from the deep and dark web
cti threat-intelligence cyberhunter darkweb deepweb
3866
IntelOwl
intelowlproject / IntelOwl
IntelOwl: manage your Threat Intelligence at scale
security-tools python threat-intelligence ioc incident-response cyber-threat-intelligence enrichment honeynet osint osint-python threatintel malware-analysis malware-analyzer intel-owl threat-hunting hacktoberfest cyber-security cybersecurity threathunting dfir
Language:Python 3136
teler
kitabisa / teler
Real-time HTTP Intrusion Detection
threat-hunting threat-intelligence ids intrusion-detection-system threat-analyzer go golang intrusion-detection intrusion threat threat-rules analyze-logs iocs logs log-analyzer log
Language:Go 2974
Neo23x0 / signature-base
YARA signature and IOC database for my scanners and tools
anti-virus dfir hash ioc scanner signature threat-hunting threat-intelligence yara yara-rules
Language:YARA 2348
x0rz / phishing_catcher
Phishing catcher using Certstream
phishing threat-intelligence certificate-transparency osint threatintel
Language:Python 1656
nshalabi / SysmonTools
Utilities for Sysmon
sysmon threatintel sysinternals threat-hunting windows netsec monitoring logging threat-intelligence
1450
osintbrazuca / osint-brazuca
Repositório criado com intuito de reunir informações, fontes(websites/portais) e tricks de OSINT dentro do contexto Brasil.
brasil hacking osint threat-hunting threat-intelligence threatintel
1398
Digital-Forensics-Guide
mikeroyal / Digital-Forensics-Guide
Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.
digitalforensics digitalforensicreadiness forensics security forensics-tools digital-forensics threat-intelligence intrusion-detection mitre-attack detection-engineering network-security offensive-security cyber-security port-scanning siem alerting forensic-analysis forensics-investigations osint dfir
Language:Python 1366
ninoseki / mitaka
A browser extension for OSINT search
chrome-extension security threat-intelligence osint
Language:TypeScript 1328
tomchop / malcom
Malcom - Malware Communications Analyzer
malware network-traffic pcap threat-intelligence malware-analysis infosec dfir
Language:Python 1138
Te-k / harpoon
CLI tool for open source and threat intelligence
osint osint-framework threatintel threat-intelligence
Language:Python 1135
trickest / inventory
Asset inventory of over 800 public bug bounty programs.
security bugbounty bugbountytips infosec reconnaissance recon pentesting hacking security-tools red-team penetration-testing software-security pentest-tool osint osint-tool osint-resources threat-intelligence bug-bounty fuzzing
Language:Shell 1128
ThePhish
emalderson / ThePhish
ThePhish: an automated phishing email analysis tool
email detection malware phishing cybersecurity misp thehive thehive4 thehive4py indicators-of-compromise cyberdefense phishing-detection python incident-response free digital-forensics threat-intelligence webapp attack script
Language:Python 1049
toolswatch / vFeed
The Correlated CVE Vulnerability And Threat Intelligence Database API
cve oval threat-intelligence-database python vfeed cwe capec scap vulnerability-databases vulnerability-detection vulnerability-database-entry vulnerability-identification threat intelligence-gathering exploits vulnerability vulnerability-scanners common-vulnerability-exposure threat-intelligence threatintel
Language:Python 923
alvin-tosh / Malware-Exhibit
🚀🚀 This is a 🎇🔥 REAL WORLD🔥 🎇 Malware Collection I have Compiled & analysed by researchers🔥 to understand more about Malware threats😈, analysis and mitigation🧐.
cryptography cybersecurity encryption-decryption ethical-hacking infosec keylogger malware-analysis malware-research ransomware stealer-windows threat-hunting threat-intelligence trojan virus malware notpetya-malware petya spyware wannacry-ransomware apt
Language:Assembly 914
curated-intel / Ukraine-Cyber-Operations
Curated Intelligence is working with analysts from around the world to provide useful information to organisations in Ukraine looking for additional free threat intelligence. Slava Ukraini. Glory to Ukraine.
ukraine osint cti threat-intelligence iocs threat-hunting yara malware
Language:YARA 907
osintbrazuca / osint-brazuca-regex
Repositório criado com intuito de reunir expressões regulares dentro do contexto Brasil
brasil brazil hacking osint regex threat-hunting threat-intelligence
893
ninoseki / mihari
A query aggregator for OSINT based threat hunting
threat-hunting threat-intelligence osint
Language:Ruby 828
Watcher
thalesgroup-cert / Watcher
Watcher - Open Source Cybersecurity Threat Hunting Platform. Developed with Django & React JS.
cybersecurity threat-hunting django reactjs rss-bridge misp thehive security incident-response threat-detection threat-intelligence nltk watcher certificate-transparency certstream osint osint-python webapp monitoring phishing
Language:Python 801
A3sal0n / CyberThreatHunting
A collection of resources for Threat Hunters - Sponsored by Falcon Guard
threat-hunting dfir cybersecurity incident-response threat-intelligence
Language:Python 796
InQuest / ThreatIngestor
Extract and aggregate threat intelligence.
ioc indicators-of-compromise threatintel threat-intelligence osint dfir malware-research security-tools threat-sharing threat-feeds threat-hunting misp fraud-detection threat-analysis intelligence-gathering threat-intelligence-platform yara soar
Language:Python 790
DaProfiler
daprofiler / DaProfiler
DaProfiler is an OSINT tool allowing you to collect certain information about yourself in order to rectify by rgpd requests the traces you may have left on the net. DaProfiler is indeed able to recover: Addresses, Social media accounts, e-mail addresses, mobile / landline number, jobs.
osint social-media social-network instagram email facebook skype python osint-python osint-tools threat-intelligence tracelabs intelligence information-gathering emails france person-search
Language:Python 784
ion-storm / sysmon-config
Advanced Sysmon ATT&CK configuration focusing on Detecting the Most Techniques per Data source in MITRE ATT&CK, Provide Visibility into Forensic Artifact Events for UEBA, Detect Exploitation events with wide CVE Coverage, and Risk Scoring of CVE, UEBA, Forensic, and MITRE ATT&CK Events.
sysmon threatintel threat-hunting netsec sysinternals logging graylog graylog-plugin dfir threat-intelligence threat-sharing threat-analysis mitre-attack digitalforensics forensic-analysis forensicartifacts forensics siem sigma-rules humio
Language:PowerShell 752
KasperskyLab / klara
Kaspersky's GReAT KLara
klara threat-hunting threat-intelligence yara-rules
Language:PHP 680
opensquat
atenreiro / opensquat
The openSquat is an open-source tool for detecting domain look-alikes by searching for newly registered domains that might be impersonating legit domains.
blue-team cybersecurity cybersquatting domain-name domain-squatting homograph-attack infosec malware osint phishing phishing-detection phishing-domains python scanner security-tools threat-hunting threat-intelligence typosquatting
Language:Python 651
Patrowl / PatrowlManager
PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform
automation orchestration secops patrowl incident-response api security-tools vulnerability-management security-automation security-scanner vulnerability-scanners vulnerability-detection threat-intelligence threat-hunting ioc thehive vulnerabilities scans
Language:HTML 610
t4d / StalkPhish
StalkPhish - The Phishing kits stalker, harvesting phishing kits for investigations.
phishing phishing-sites threat-intelligence threat-hunting threatintel fraud-detection osint investigation phishing-kit scammers infosec
Language:Python 604
advanced-threat-research / Yara-Rules
Repository of YARA rules made by Trellix ATR Team
yara iocs threat-hunting threat-intelligence
Language:YARA 538
ciscocsirt / GOSINT
The GOSINT framework is a project used for collecting, processing, and exporting high quality indicators of compromise (IOCs).
threat-intelligence ioc security golang
Language:JavaScript 533
matamorphosis / Scrummage
The Ultimate OSINT and Threat Hunting Framework
osint threat-intelligence threat-hunting open-source-intelligence web-application cyber-security dashboard
Language:Python 488