#1Tools for consuming, aggregating, and analyzing external threat intelligence feeds from various sources.
Kitploit recommended
taxiiproject/libtaxiiA Python library for handling TAXII Messages invoking TAXII Services.
olafhartong/attackdatamapA datasource assessment on an event level to show potential coverage or the MITRE ATT&CK framework
mellow-hype/c2finderLook for un-sinkholed C&C IPs in your Bro logs (from Bambanek Consulting C&C master list)
insane-forensics/drovorub-huntA tool to assist with network-based hunting for GRU's Drovorub malware c2
ecstatic-nobel/osweepDon't Just Search OSINT. Sweep It.
bfuzzy/auditd-attackA Linux Auditd rule set mapped to MITRE's Attack Framework
1an0rmus/tekdefense-automaterAutomater - IP URL and MD5 OSINT Analysis
