#1Tools for consuming, aggregating, and analyzing external threat intelligence feeds from various sources.
Kitploit recommended
malvuln/sigint-hombreDynamically generated Suricata rules from real-time threat feeds
eclecticiq/opentaxiiTAXII server implementation in Python from EclecticIQ
aquasecurity/vuln-list-aquaSecurity advisories from Aqua Security
mfmokbel/crawlectorCrawlector is a threat hunting framework designed for scanning websites for malicious objects.
scoubi/bloodsocerAggregates MITRE ATT&CK, Sigma, and Atomic Red Team data into BloodHound graphs so SOC analysts can map detection coverage, identify gaps, and…
rollwagen/abusechCLI client for abuse.ch
sumidcyber/zeroscout🦅 ZeroScout: The Autonomous Local & Cloud Threat Hunter. Visualize attacks in a live War Room, identify APT groups via Genetic Analysis, and…
xakepnz/enterpriseattackA lightweight Python module to interact with the [MITRE ATT&CK®](https://attack.mitre.org/) Enterprise dataset. Built for speed with minimal…
aquasecurity/vexhub-crawlerCollect VEX documents and update VEX Hub
qbitseclabs/brintelcollectorCyber Threat Intelligence (CTI) usando fontes e indicadores de ameaças nacionais, ou até globais, mas com evidencias ou indicadores nacionais do…
synacktiv/synacktiv-rulesPublic repository of Sigma and YARA rules created by Synacktiv
patrowl/patrowlhearsPatrowlHears - Vulnerability Intelligence Center / Exploits
olivsec/loboguaraCyber threat intelligence platform for SSL certificate discovery, domain/URL scanning, data leak monitoring, tracking link generation, and threat…
rxerium/honeypot🍯Honeypot Threat Intel
randomuserid/adamaSearches For Threat Hunting and Security Analytics
stamusnetworks/sciriusWeb interface for Suricata ruleset management, threat hunting, and rule tuning with multi-source feed aggregation, transformation, and activity…
nextcloud/security-advisories👮 Security advisories of Nextcloud
pedramamini/iocextractDefanged Indicator of Compromise (IOC) Extractor.
