wtfis
pirxthepilot/wtfisPassive hostname, domain and IP lookup tool for non-robots
osintreconnaissancethreat-feeds-aggregators+3
Tools for consuming, aggregating, and analyzing external threat intelligence feeds from various sources.
pirxthepilot/wtfisPassive hostname, domain and IP lookup tool for non-robots
phishdestroy/destroylistReal-time phishing & scam domain blocklist - 208k+ curated threats, 1M+ community, free API, multiple formats
bushidouk/ransomware-tool-matrixA resource containing all the tools each ransomware gangs uses
olafhartong/threathuntingA Splunk app mapped to MITRE ATT&CK to guide your threat hunts
certtools/intelmqIntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
ninoseki/mihariA query aggregator for OSINT based threat hunting
curated-intel/ukraine-cyber-operationsCurated Intelligence is working with analysts from around the world to provide useful information to organisations in Ukraine looking for additional…
pedramamini/threatingestorAutomated threat intelligence aggregation tool that extracts and normalizes indicators from multiple sources (OSINT feeds, malware reports) into a…
bfuzzy/auditd-attackA Linux Auditd rule set mapped to MITRE's Attack Framework
montysecurity/c2-trackerLive Feed of C2 servers, tools, and botnets
grapl-security/graplGraph platform for Detection and Response
stamusnetworks/sciriusWeb interface for Suricata ruleset management, threat hunting, and rule tuning with multi-source feed aggregation, transformation, and activity…
stanfrbd/cyberbroA simple application that extracts your IoCs from garbage input and checks their reputation using multiple CTI services.
ransomlook/ransomlookAutomated ransomware and leak-site OSINT tracker scraping dark-web markets, monitoring victim posts, enriching actor/crypto data, and sending…
katrielmoses/voidaccessSelf-hosted dark web OSINT platform. Automated threat intelligence from query to graph in 13 steps. Free alternative to Recorded Future, DarkOwl, and…
pedramamini/iocextractDefanged Indicator of Compromise (IOC) Extractor.
paloaltonetworks/unit42-timely-threat-intelA collection of files with indicators supporting social media posts from Palo Alto Network's Unit 42 team to disseminate timely threat intelligence.
