PatrowlHears
patrowl/patrowlhearsReal-time vulnerability intelligence platform aggregating CVE, exploits, and threat news for SOC and threat hunting teams.
defensive-toolsexploitationinformation-gathering+3
167
patrowl/patrowlhearsReal-time vulnerability intelligence platform aggregating CVE, exploits, and threat news for SOC and threat hunting teams.
gnomeman/badbanana-threat-observatoryThreat intel observatory aggregating CISA KEV, ThreatFox, URLhaus, and MalwareBazaar feeds with search, change tracking, and STIX/CSV/JSONL export.
crowdsecurity/crowdsecOpen-source IDS/IPS and WAF engine that analyzes logs and HTTP requests to detect and block malicious IPs, leveraging a crowdsourced community…
paloaltonetworks/unit42-timely-threat-intelA collection of files with indicators supporting social media posts from Palo Alto Network's Unit 42 team to disseminate timely threat intelligence.
certtools/intelmqMessage-queue-based threat intelligence feed collector and processor for CSIRTs. Automates ingestion, normalization, and sharing of security…
gendigitalinc/iocA continuously updated collection of threat intelligence indicators of compromise (IOCs), including YARA rules, for detecting and tracking malware…
criticalpathsecurity/zeek-intelligence-feedsAggregated Zeek-format threat intelligence feeds with combined indicators from public and curated sources for continuous IDS and network threat…
cisco-talos/iocsRegularly updated Cisco Talos indicators of compromise, published alongside threat research and formatted for use in blocklists, detections, and…
stamusnetworks/sciriusWeb interface for Suricata ruleset management, threat hunting, and rule tuning with multi-source feed aggregation, transformation, and activity…
jpcertcc/phishurl-listCurated dataset of confirmed phishing URLs from JPCERT/CC, including confirmation date, full URL, and spoofed brand for threat intelligence and…
randomuserid/adamaSearches For Threat Hunting and Security Analytics
bruneaug/dshield-siemDeploys an ELK-based SIEM to collect, parse, and visualize DShield honeypot sensor logs, with Filebeat ingestion, dashboards, and ISC threat…
malvuln/sigint-hombreDynamically generated Suricata rules from real-time threat feeds
aquasecurity/vuln-list-aquaCurated collection of security advisories from Aqua Security, providing structured vulnerability data for threat intelligence and analysis.
sumidcyber/zeroscoutAutonomous threat hunting framework for DFIR and SOC analysts. Performs static malware analysis, APT group attribution via genetic code analysis, and…
adham504/sentinelthread-forensicsHigh-speed Windows forensic triage platform that orchestrates the Hayabusa engine to transform raw EVTX logs into prioritized threat timelines with…
rxerium/honeypotDeploy a TPOT honeypot for threat intelligence collection, real-time attack monitoring, and malicious IP aggregation with Elastic/Kibana log analysis.
fastfire/deepdarkctiCollection of Cyber Threat Intelligence sources from the deep and dark web