Threat Intelligence

defensepointsecurity/threat_note

DPS' Lightweight Investigation Notebook

pownjs/recon

A powerful target reconnaissance framework powered by graph theory.

intezer/linux-explorer

Easy-to-use live forensics toolbox for Linux endpoints

digitalmethodsinitiative/dmi-tcat

Digital Methods Initiative - Twitter Capture and Analysis Toolset

tnich/honssh

HonSSH is designed to log all SSH communications between a client and server.

cyb3rward0g/invoke-attackapi

A PowerShell script to interact with the MITRE ATT&CK Framework via its own API

opencspm/opencspm

Open Cloud Security Posture Management Engine

captaingeech42/ransomwatch

Ransomware leak site monitoring

phage-nz/ph0neutria

ph0neutria is a malware zoo builder that sources samples straight from the wild. Everything is stored in Viper for ease of access and manageability.

alb-uss/secmon

SECMON is a web-based tool for the automation of infosec watching and vulnerability management with a web interface.

target/halogen

Automatically create YARA rules from malicious documents.

megamansec/ldap-monitoring-watchdog

LDAP Watchdog: A real-time linux-compatible LDAP monitoring tool for detecting directory changes, providing visibility into additions, modifications,…

anteater/anteater

Anteater - CI/CD Gate Check Framework

tg12/poc_cves

PoC_CVEs

splunk/melting-cobalt

A Cobalt Strike Scanner that retrieves detected Team Server beacons into a JSON object

mitrecnd/whodat

Pivotable Reverse WhoIs / PDNS Fusion with Registrant Tracking & Alerting plus API for automated queries (JSON/CSV/TXT)

utkusen/jeopardize

a low(zero) cost threat intelligence&response tool against phishing domains