
Antiphishing
Advanced Phishing Protection: Suricata rulesets open and free

Advanced Phishing Protection: Suricata rulesets open and free

Curated repository of threat intelligence feeds, IoC lists, YARA rules, and DFIR tool references for SOC/CERT/CTI detection and incident response.

Digital forensics engine that parses logs, files, and system artifacts to build super timelines, enabling chronological event correlation for…

Taxonomies used in MISP taxonomy system and can be used by other information sharing tool.

Malicious Extension Database

Real-time malicious traffic detection system using public blacklists, static malware trails, and heuristic analysis to identify threats across DNS,…

DFIR forensics companion server + capture extension

Repository created to share information about tactics, techniques and procedures used by threat actors. Initially with ransomware groups and evolving…

Zero-API aggregator indexing 150k+ CVE exploits and PoCs from Exploit-DB, Nuclei, Metasploit, and CISA KEV, with EPSS/CVSS risk scoring for threat…

A continuously updated resource that catalogs confirmed data breaches from across the globe. Each entry includes the breach name, usually aligned…

Open Cyber Threat Intelligence Platform

Incident Response Documentation Platform

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.

Static analysis of malicious Python code

📕NVD Database

Collaborative forensic timeline analysis platform for ingesting, searching, and annotating event logs to support incident response and DFIR…

Trust & Safety tools for working together to fight digital harms.