paloaltonetworks/unit42-timely-threat-intelA collection of files with indicators supporting social media posts from Palo Alto Network's Unit 42 team to disseminate timely threat intelligence.
ransomlook/ransomlookAutomated ransomware and leak-site OSINT tracker scraping dark-web markets, monitoring victim posts, enriching actor/crypto data, and sending…
pirxthepilot/wtfisPassive hostname, domain and IP lookup tool for non-robots
volexity/threat-intelSignatures and IoCs from public Volexity blog posts.
bfuzzy/auditd-attackA Linux Auditd rule set mapped to MITRE's Attack Framework
curated-intel/ukraine-cyber-operationsCurated Intelligence is working with analysts from around the world to provide useful information to organisations in Ukraine looking for additional…
gendigitalinc/iocA continuously updated collection of threat intelligence indicators of compromise (IOCs), including YARA rules, for detecting and tracking malware…
olafhartong/threathuntingA Splunk app mapped to MITRE ATT&CK to guide your threat hunts
shirkdog/pulledporkPulled Pork for Snort and Suricata rule management (from Google code)
olafhartong/attackdatamapA datasource assessment on an event level to show potential coverage or the MITRE ATT&CK framework
jpcertcc/phishurl-listCurated dataset of confirmed phishing URLs from JPCERT/CC, including confirmation date, full URL, and spoofed brand for threat intelligence and…
wiz-sec-public/wiz-research-iocs
eclecticiq/opentaxiiTAXII server implementation in Python from EclecticIQ
patrowl/patrowlhearsPatrowlHears - Vulnerability Intelligence Center / Exploits
taxiiproject/libtaxiiA Python library for handling TAXII Messages invoking TAXII Services.
bruneaug/dshield-siemDShield Sensor Log Collection with ELK
