100_days_of_kql_2026
m4nbat/100_days_of_kql_2026A repo to hold KQL queries as part of my 100 days of KQL effort.
threat-feeds-aggregatorsthreat-intelligenceeducation+3
19
Tools for consuming, aggregating, and analyzing external threat intelligence feeds from various sources.
m4nbat/100_days_of_kql_2026A repo to hold KQL queries as part of my 100 days of KQL effort.
teycir/seekyouOSINT intelligence on any IP, domain, or ASN
aquasecurity/vuln-list-redhatRed Hat security advisories
malvuln/sigint-hombreDynamically generated Suricata rules from real-time threat feeds
fastfire/ioc_attack_esxi_feb_2023Collection of IoCs available and related to attacks on ESXi infrastructures that occurred as of Friday February 3, 2023.
cspf-founder/darwis-taxiiA high-performance TAXII (Trusted Automated eXchange of Indicator Information) server written in Rust.
sumidcyber/zeroscout🦅 ZeroScout: The Autonomous Local & Cloud Threat Hunter. Visualize attacks in a live War Room, identify APT groups via Genetic Analysis, and…
aquasecurity/vuln-list-debianDebian Security Tracker
aquasecurity/secfixes-trackerForked from https://gitlab.alpinelinux.org/kaniini/secfixes-tracker
qbitseclabs/brintelcollectorCyber Threat Intelligence (CTI) usando fontes e indicadores de ameaças nacionais, ou até globais, mas com evidencias ou indicadores nacionais do…
aquasecurity/vexhub-crawlerCollect VEX documents and update VEX Hub
expel-io/expel-intelThis is the home of the Expel Intel Team. Here, we will share IOCs and other information that is either not suitable for fitting into other mediums…
aquasecurity/vuln-list-aquaSecurity advisories from Aqua Security
mellow-hype/c2finderLook for un-sinkholed C&C IPs in your Bro logs (from Bambanek Consulting C&C master list)
adham504/sentinelthread-forensicsHigh-speed Windows forensic triage platform that orchestrates the Hayabusa engine to transform raw EVTX logs into prioritized threat timelines with…
xakepnz/enterpriseattackA lightweight Python module to interact with the [MITRE ATT&CK®](https://attack.mitre.org/) Enterprise dataset. Built for speed with minimal…
rollwagen/abusechCLI client for abuse.ch