maltrail
stamparm/maltrailReal-time malicious traffic detection system using public blacklists, static malware trails, and heuristic analysis to identify threats across DNS,…
defensive-toolsthreat-feeds-aggregatorsinformation-gathering+5
8.6k
Tools for consuming, aggregating, and analyzing external threat intelligence feeds from various sources.
stamparm/maltrailReal-time malicious traffic detection system using public blacklists, static malware trails, and heuristic analysis to identify threats across DNS,…
julioliraup/antiphishingAdvanced Phishing Protection: Suricata rulesets open and free
olafhartong/threathuntingA Splunk app mapped to MITRE ATT&CK to guide your threat hunts
olafhartong/attackdatamapA datasource assessment on an event level to show potential coverage or the MITRE ATT&CK framework
randomuserid/adamaSearches For Threat Hunting and Security Analytics
bfuzzy/auditd-attackA Linux Auditd rule set mapped to MITRE's Attack Framework
insane-forensics/drovorub-huntA tool to assist with network-based hunting for GRU's Drovorub malware c2
ninoseki/mihariA query aggregator for OSINT based threat hunting
yeti-platform/yetiYour Everyday Threat Intelligence
patrowl/patrowlhearsPatrowlHears - Vulnerability Intelligence Center / Exploits
jangeisbauer/gundoggundog - guided hunting in Microsoft Defender
cred-club/artifAn advanced real time threat intelligence framework to identify threats and malicious web traffic on the basis of IP reputation and historical data.
crowdsecurity/crowdsecOpen-source IDS/IPS and WAF engine that analyzes logs and HTTP requests to detect and block malicious IPs, leveraging a crowdsourced community…
payloadsecurity/sandbox_scryer
qbitseclabs/brintelcollectorCyber Threat Intelligence (CTI) usando fontes e indicadores de ameaças nacionais, ou até globais, mas com evidencias ou indicadores nacionais do…
pedramamini/iocextractDefanged Indicator of Compromise (IOC) Extractor.
