#1Tools for managing, sharing, and integrating Indicators of Compromise (IOCs) into security defenses.
Kitploit recommended
abhinavbom/threat-intelligence-hunterTIH is an intelligence tool that helps you in searching for IOCs across multiple openly available security feeds and some well known APIs. The idea…
wiz-sec-public/wiz-research-iocsCurated public database of indicators of compromise aggregated by Wiz Research for threat detection, hunting, and incident response workflows.
cobalt-strike/sleep_python_bridgeThis project is 'bridge' between the sleep and python language. It allows the control of a Cobalt Strike teamserver through python without the need…
mubix/cve-2021-44228-log4shell-hashesHashes for vulnerable LOG4J versions
inquest/threatkbKnowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)
silascutler/malpipeMalware/IOC ingestion and processing engine
cred-club/artifAn advanced real time threat intelligence framework to identify threats and malicious web traffic on the basis of IP reputation and historical data.
huntresslabs/threat-intelThis repository contains supplemental items including IOCs, and signatures discussed in Huntress blogposts, and other media.
assafmo/xiocExtract indicators of compromise from text, including "escaped" ones.
cado-security/dfir_resources_revil_kaseyaResources for DFIR Professionals Responding to the REvil Ransomware Kaseya Supply Chain Attack
elastic/labs-releasesElastic Security Labs releases
cronup/malware-iocsCollects and organizes malware indicators of compromise (IOCs) for rapid threat detection, incident response, and actionable intelligence sharing.
adulau/the-art-of-pivotingThe Art of Pivoting - Techniques for Intelligence Analysts to Discover New Relationships in a Complex World
google/threat-teamNo longer maintained. Please refer to Google Threat Intelligence / Virus Total collections.
packetsifter/packetsiftertoolPacketSifter is a tool/script that is designed to aid analysts in sifting through a packet capture (pcap) to find noteworthy traffic. Packetsifter…
homas/ioc2rpzioc2rpz is a place where threat intelligence meets DNS.
