Tools

opencve/opencve

Aggregate, filter, and track CVEs from multiple sources with team collaboration, custom dashboards, alerts, and AI-powered analysis for vulnerability…

amnestytech/investigations

Indicators of Compromise from Amnesty International's cyber investigations

curated-intel/ukraine-cyber-operations

Curated Intelligence is working with analysts from around the world to provide useful information to organisations in Ukraine looking for additional…

pedramamini/threatingestor

Automated threat intelligence aggregation tool that extracts and normalizes indicators from multiple sources (OSINT feeds, malware reports) into a…

forrest-orr/moneta

Moneta is a live usermode memory analysis tool for Windows with the capability to detect malware IOCs

stanfrbd/cyberbro

A simple application that extracts your IoCs from garbage input and checks their reputation using multiple CTI services.

sophoslabs/iocs

Sophos-originated indicators-of-compromise from published reports

paloaltonetworks/unit42-timely-threat-intel

A collection of files with indicators supporting social media posts from Palo Alto Network's Unit 42 team to disseminate timely threat intelligence.

volexity/threat-intel

Signatures and IoCs from public Volexity blog posts.

cred-club/artif

An advanced real time threat intelligence framework to identify threats and malicious web traffic on the basis of IP reputation and historical data.

eclecticiq/opentaxii

TAXII server implementation in Python from EclecticIQ

360netlab/dga

Suspicious DGA from PDNS and Sandbox.

fhightower/ioc-finder

Python library for extracting Indicators of Compromise, URLs, IP addresses, hashes, and email addresses from text using declarative grammars instead…

assafmo/xioc

Extract indicators of compromise from text, including "escaped" ones.

alex-cart/leaf

Linux Evidence Acquisition Framework

threatlabz/iocs

Curated Indicators of Compromise and YARA rules from Zscaler ThreatLabz public reports for threat hunting, malware research, and detection…