Tools

bfuzzy/auditd-attack

A Linux Auditd rule set mapped to MITRE's Attack Framework

stamparm/maltrail

Real-time malicious traffic detection system using public blacklists, static malware trails, and heuristic analysis to identify threats across DNS,…

vxunderground/threatintelligencediscordbot

Gets updates from various clearnet domains and ransomware threat actor domains

toborrm9/malicious_extension_sentry

Malicious Extension Database

payloadsecurity/sandbox_scryer

Parses public sandbox detonation reports to produce threat hunting intelligence, organizes findings via MITRE ATT&CK, assembles IOCs, and generates…