
misp-galaxy
Clusters and elements to attach to MISP events or attributes (like threat actors)

Clusters and elements to attach to MISP events or attributes (like threat actors)

Real-time global intelligence dashboard. AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking in a unified situational…

High-performance Certificate Transparency (CT) monitoring tool written in Rust. Real-time stream of newly issued SSL/TLS certificates from CT logs.…

Curated repository of threat intelligence feeds, IoC lists, YARA rules, and DFIR tool references for SOC/CERT/CTI detection and incident response.

Aggregated Zeek-format threat intelligence feeds with combined indicators from public and curated sources for continuous IDS and network threat…

Curated IPv4 blocklist of malicious addresses, refreshed every 6 hours for firewall and WAF ingestion, with split lists and CTI-ready formats for…

A repo to conduct vulnerability enrichment.

Zero-API aggregator indexing 150k+ CVE exploits and PoCs from Exploit-DB, Nuclei, Metasploit, and CISA KEV, with EPSS/CVSS risk scoring for threat…

This repository contains Open Source freely usable Threat Intel feeds that can be used without additional requirements. Contains multiple types such…

Real-time malicious traffic detection system using public blacklists, static malware trails, and heuristic analysis to identify threats across DNS,…

Malicious Extension Database

Local security intelligence for CVE triage - 40 data sources and 41 tools, risk scores and an MCP server for AI agents, all in native Rust. Private…

Multi-Sources Analysis & Threat Intelligence Search

Advanced Phishing Protection: Suricata rulesets open and free

Debian Security Tracker

Repository created to share information about tactics, techniques and procedures used by threat actors. Initially with ransomware groups and evolving…

Collection of Cyber Threat Intelligence sources from the deep and dark web

MISP (core software) - Open Source Threat Intelligence and Sharing Platform