awesome-lists
mthcht/awesome-listsCurated repository of threat intelligence feeds, IoC lists, YARA rules, and DFIR tool references for SOC/CERT/CTI detection and incident response.
ioc-managementthreat-feeds-aggregatorsdigital-forensics+4
1.9k
Tools for consuming, aggregating, and analyzing external threat intelligence feeds from various sources.
mthcht/awesome-listsCurated repository of threat intelligence feeds, IoC lists, YARA rules, and DFIR tool references for SOC/CERT/CTI detection and incident response.
opencti-platform/openctiOpen Cyber Threat Intelligence Platform
fastfire/deepdarkctiCollection of Cyber Threat Intelligence sources from the deep and dark web
phishdestroy/destroylistReal-time phishing & scam domain blocklist - 208k+ curated threats, 1M+ community, free API, multiple formats
aquasecurity/vuln-list-redhatRed Hat security advisories
aquasecurity/vuln-list-debianDebian Security Tracker
koala73/worldmonitorReal-time global intelligence dashboard. AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking in a unified situational…
julioliraup/antiphishingAdvanced Phishing Protection: Suricata rulesets open and free
criticalpathsecurity/zeek-intelligence-feedsAggregated Zeek-format threat intelligence feeds with combined indicators from public and curated sources for continuous IDS and network threat…
stamparm/maltrailReal-time malicious traffic detection system using public blacklists, static malware trails, and heuristic analysis to identify threats across DNS,…
toborrm9/malicious_extension_sentryMalicious Extension Database
functori/argos/argosAnalysis and Representation of Graphs of Suspicious Operations (Analyse et Représentation des Graphes des Opérations Suspectes)
yeti-platform/yetiYour Everyday Threat Intelligence
crowdsecurity/crowdsecOpen-source IDS/IPS and WAF engine that analyzes logs and HTTP requests to detect and block malicious IPs, leveraging a crowdsourced community…
xghst0/reconkgVulnerability triage with provenance. Resolves CVEs from locally built corpora (NVD/KEV/EPSS, ExploitDB, nmap script.db) and emits verification…
soldier0x0/briefrOpen Vulnerability Intelligence platform, aggregated intel in one dashboard, with correlation and IOC lookups, completely self hosted. All resources…
t-beckett/vulnbook-deletion_scheduled-85395299Offline-first vulnerability findings tracker that searches 11 CVE databases in parallel, adds EPSS/KEV enrichment, and manages coordinated disclosure…
bruneaug/dshield-siemDShield Sensor Log Collection with ELK