t-beckett/vulnbook-deletion_scheduled-85395299Offline-first vulnerability findings tracker that searches 11 CVE databases in parallel, adds EPSS/KEV enrichment, and manages coordinated disclosure…
fastfire/ioc_attack_esxi_feb_2023Collection of IoCs available and related to attacks on ESXi infrastructures that occurred as of Friday February 3, 2023.
bushidouk/ransomware-tool-matrixA resource containing all the tools each ransomware gangs uses
eclecticiq/opentaxiiTAXII server implementation in Python from EclecticIQ
1an0rmus/tekdefense-automaterAutomater - IP URL and MD5 OSINT Analysis
pedramamini/threatingestorAutomated threat intelligence aggregation tool that extracts and normalizes indicators from multiple sources (OSINT feeds, malware reports) into a…
expel-io/expel-intelThis is the home of the Expel Intel Team. Here, we will share IOCs and other information that is either not suitable for fitting into other mediums…
watchguard-threat-lab/log4shell-iocsA collection of IOCs for CVE-2021-44228 also known as Log4Shell
blevene/bandjacksCyber Threat Defense World Modeling
stanfrbd/cyberbroA simple application that extracts your IoCs from garbage input and checks their reputation using multiple CTI services.
toborrm9/malicious_extension_sentryMalicious Extension Database
adham504/sentinelthread-forensicsHigh-speed Windows forensic triage platform that orchestrates the Hayabusa engine to transform raw EVTX logs into prioritized threat timelines with…
intelowlproject/intelowlScalable threat intelligence platform that enriches observables and files using 200+ analyzers, with built-in GUI, REST API, and automated workflows…
hurricanelabs/machinaeAutomated security intelligence collector that queries public feeds and APIs for threat data on IPs, domains, URLs, hashes, and SSL fingerprints,…
stamparm/maltrailReal-time malicious traffic detection system using public blacklists, static malware trails, and heuristic analysis to identify threats across DNS,…
olafhartong/threathuntingA Splunk app mapped to MITRE ATT&CK to guide your threat hunts
crowdsecurity/crowdsecOpen-source IDS/IPS and WAF engine that analyzes logs and HTTP requests to detect and block malicious IPs, leveraging a crowdsourced community…
