infostealers-stats/data-breachA continuously updated resource that catalogs confirmed data breaches from across the globe. Each entry includes the breach name, usually aligned…
threatray/threat-researchIoCs and YARA rules from Threatray's Threat Research
paloaltonetworks/unit42-timely-threat-intelA collection of files with indicators supporting social media posts from Palo Alto Network's Unit 42 team to disseminate timely threat intelligence.
opencve/opencveAggregate, filter, and track CVEs from multiple sources with team collaboration, custom dashboards, alerts, and AI-powered analysis for vulnerability…
sophoslabs/iocsSophos-originated indicators-of-compromise from published reports
threatlabz/iocsCurated Indicators of Compromise and YARA rules from Zscaler ThreatLabz public reports for threat hunting, malware research, and detection…
stanfrbd/cyberbroA simple application that extracts your IoCs from garbage input and checks their reputation using multiple CTI services.
iocx-dev/iocxAn extensible, deterministic static‑analysis engine that extracts high‑signal IOCs from PE binaries and text, built for SOC automation and modern…
fhightower/ioc-finderPython library for extracting Indicators of Compromise, URLs, IP addresses, hashes, and email addresses from text using declarative grammars instead…
deepfield/public-researchDDoS botnet research and indicators of compromise from Nokia Deepfield ERT
pduggusa/dugganusa-ietfDugganUSA threat-intelligence contributions to the IETF Hackathon — real-world agentic-attack benchmark vectors, CVE-2026-33697 attestation analysis,…
volexity/threat-intelSignatures and IoCs from public Volexity blog posts.
lukeslp/redtail-iocIOCs and a read-only triage checklist from a real Linux root compromise: RedTail miner, XorDDoS persistence, MoneroOcean miner, DirtyFrag LPE…
aelshimony-cloud/openwire-cve-2023-46604-investigation
destiny-creates/goxlr-malware-familyMalware analysis from the domain goxlr.net
pedramamini/threatingestorAutomated threat intelligence aggregation tool that extracts and normalizes indicators from multiple sources (OSINT feeds, malware reports) into a…
insomnisec/detections-cve-2026-23918Detection rules for CVE-2026-23918 Apache http2 RCE - Credit: stringa.ai, isec.pl
digi4care/shai-scanZero-dependency CLI scanner for npm/PyPI supply chain compromises. Detects compromised packages in lockfiles and system-level IOCs from attacks like…
