#1Tools for managing, sharing, and integrating Indicators of Compromise (IOCs) into security defenses.
Kitploit recommended
qeeqbox/analyzerAnalyze, extract and visualize features, artifacts and IoCs of files and memory dumps (Windows, Linux, Android, iPhone, Blackberry, macOS binaries,…
k1nd0ne/volwebA centralized and enhanced memory analysis platform
hamza-megahed/odinCentralized IoC scanner that deploys Loki across endpoints, collects detection results, and parses logs into CSV for incident response and forensic…
alex-cart/leafLinux Evidence Acquisition Framework
microsoft/msticpyMicrosoft Threat Intelligence Security Tools
chaitanyakrishna/iocscraperIOCPARSER.COM is a Fast and Reliable service that enables you to extract IOCs and intelligence from different data sources.
emalderson/thephishThePhish: an automated phishing email analysis tool
adamwhitehat/judge-jury-and-executableA file system forensics analysis scanner and threat hunting tool. Scans file systems at the MFT and OS level and stores data in SQL, SQLite or CSV.…
sepinf-inc/ipedIPED Digital Forensic Tool. It is an open source software that can be used to process and analyze digital evidence, often seized at crime scenes by…
opencve/opencveAggregate, filter, and track CVEs from multiple sources with team collaboration, custom dashboards, alerts, and AI-powered analysis for vulnerability…
deepfield/public-researchDDoS botnet research and indicators of compromise from Nokia Deepfield ERT
ethan-andrews/exploitarium-detectionsKQL detection rules for Microsoft Sentinel and Defender XDR covering the bikini/exploitarium anonymous disclosure — a personal research archive of…
blackberry/threat-research-and-intelligenceBlackBerry Threat Research & Intelligence
mellow-hype/c2finderLook for un-sinkholed C&C IPs in your Bro logs (from Bambanek Consulting C&C master list)
deadbits/yara-rulesCollection of YARA signatures from individual research
soteria-security/hafnium-iocA PowerShell script to identify indicators of exploitation of CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, and CVE-2021-26865
mandiant/ioc-scanner-cve-2019-19781Indicator of Compromise Scanner for CVE-2019-19781
mandiant/citrix-ioc-scanner-cve-2023-3519Bash-based scanner detecting indicators of compromise from CVE-2023-3519 exploitation on Citrix ADC appliances, supporting live and forensic image…
