ThreatIngestor
pedramamini/threatingestorAutomated threat intelligence aggregation tool that extracts and normalizes indicators from multiple sources (OSINT feeds, malware reports) into a…
ioc-managementosintthreat-feeds-aggregators+3
922
Tools for consuming, aggregating, and analyzing external threat intelligence feeds from various sources.
pedramamini/threatingestorAutomated threat intelligence aggregation tool that extracts and normalizes indicators from multiple sources (OSINT feeds, malware reports) into a…
volexity/threat-intelSignatures and IoCs from public Volexity blog posts.
bfuzzy/auditd-attackA Linux Auditd rule set mapped to MITRE's Attack Framework
curated-intel/ukraine-cyber-operationsCurated Intelligence is working with analysts from around the world to provide useful information to organisations in Ukraine looking for additional…
gendigitalinc/iocA continuously updated collection of threat intelligence indicators of compromise (IOCs), including YARA rules, for detecting and tracking malware…
stanfrbd/cyberbroA simple application that extracts your IoCs from garbage input and checks their reputation using multiple CTI services.
criticalpathsecurity/zeek-intelligence-feedsAggregated Zeek-format threat intelligence feeds with combined indicators from public and curated sources for continuous IDS and network threat…
katrielmoses/voidaccessSelf-hosted dark web OSINT platform. Automated threat intelligence from query to graph in 13 steps. Free alternative to Recorded Future, DarkOwl, and…
olafhartong/threathuntingA Splunk app mapped to MITRE ATT&CK to guide your threat hunts
1an0rmus/tekdefense-automaterAutomater - IP URL and MD5 OSINT Analysis
hurricanelabs/machinaeAutomated security intelligence collector that queries public feeds and APIs for threat data on IPs, domains, URLs, hashes, and SSL fingerprints,…
stamusnetworks/sciriusWeb interface for Suricata ruleset management, threat hunting, and rule tuning with multi-source feed aggregation, transformation, and activity…
vxunderground/threatintelligencediscordbotGets updates from various clearnet domains and ransomware threat actor domains
shirkdog/pulledporkPulled Pork for Snort and Suricata rule management (from Google code)
pedramamini/iocextractDefanged Indicator of Compromise (IOC) Extractor.
olafhartong/attackdatamapA datasource assessment on an event level to show potential coverage or the MITRE ATT&CK framework
toborrm9/malicious_extension_sentryMalicious Extension Database