wiz-sec-public/wiz-research-iocsCurated public database of indicators of compromise aggregated by Wiz Research for threat detection, hunting, and incident response workflows.
threatlabz/iocsThis repository is for Indicators of Compromise (IOCs) from Zscaler ThreatLabz public reports
fastfire/ioc_attack_esxi_feb_2023Collection of IoCs available and related to attacks on ESXi infrastructures that occurred as of Friday February 3, 2023.
scoubi/bloodsocerAggregates MITRE ATT&CK, Sigma, and Atomic Red Team data into BloodHound graphs so SOC analysts can map detection coverage, identify gaps, and…
synacktiv/synacktiv-rulesPublic repository of Sigma and YARA rules created by Synacktiv
renat0z3r0/notepadpp-supply-chain-iocsIoCs and detection rules for the Notepad++ supply chain attack (CVE-2025-15556) — Lotus Blossom APT, June–December 2025. Includes Falcon LogScale…
paloaltonetworks/unit42-timely-threat-intelA collection of files with indicators supporting social media posts from Palo Alto Network's Unit 42 team to disseminate timely threat intelligence.
the-art-of-hacking/h4ckerCurated collection of cybersecurity resources, labs, and training materials covering ethical hacking, penetration testing, exploit development,…
hackinghippo/log4shell_ioc_ipslog4j / log4shell IoCs from multiple sources put together in one big file (IPs) more coming soon (CVE-2021-44228)
guardicode/cve-2021-44228_iocsCurated collection of public Indicators of Compromise (IoCs) for the Log4j vulnerability (CVE-2021-44228), aggregated from multiple sources for…
watchguard-threat-lab/log4shell-iocsA collection of IOCs for CVE-2021-44228 also known as Log4Shell
certtools/intelmqIntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
fastfire/deepdarkctiCollection of Cyber Threat Intelligence sources from the deep and dark web
circl/ail-frameworkAIL framework - Analysis Information Leak framework. Project moved to https://github.com/ail-project
randomuserid/adamaSearches For Threat Hunting and Security Analytics
insane-forensics/drovorub-huntA tool to assist with network-based hunting for GRU's Drovorub malware c2
jangeisbauer/gundoggundog - guided hunting in Microsoft Defender
