pedramamini/threatingestorAutomated threat intelligence aggregation tool that extracts and normalizes indicators from multiple sources (OSINT feeds, malware reports) into a…
volexity/threat-intelSignatures and IoCs from public Volexity blog posts.
bfuzzy/auditd-attackA Linux Auditd rule set mapped to MITRE's Attack Framework
gendigitalinc/iocThreat Intel IoCs + bits and pieces of dark matter. Published by Gen Threat Labs.
stanfrbd/cyberbroA simple application that extracts your IoCs from garbage input and checks their reputation using multiple CTI services.
katrielmoses/voidaccessSelf-hosted dark web OSINT platform. Automated threat intelligence from query to graph in 13 steps. Free alternative to Recorded Future, DarkOwl, and…
olafhartong/threathuntingA Splunk app mapped to MITRE ATT&CK to guide your threat hunts
1an0rmus/tekdefense-automaterAutomater - IP URL and MD5 OSINT Analysis
hurricanelabs/machinaeAutomated security intelligence collector that queries public feeds and APIs for threat data on IPs, domains, URLs, hashes, and SSL fingerprints,…
stamusnetworks/sciriusWeb interface for Suricata ruleset management, threat hunting, and rule tuning with multi-source feed aggregation, transformation, and activity…
vxunderground/threatintelligencediscordbotGets updates from various clearnet domains and ransomware threat actor domains
shirkdog/pulledporkPulled Pork for Snort and Suricata rule management (from Google code)
pedramamini/iocextractDefanged Indicator of Compromise (IOC) Extractor.
olafhartong/attackdatamapA datasource assessment on an event level to show potential coverage or the MITRE ATT&CK framework
toborrm9/malicious_extension_sentryMalicious Extension Database
ecstatic-nobel/osweepDon't Just Search OSINT. Sweep It.
payloadsecurity/sandbox_scryer