pedramamini/threatingestorAutomated threat intelligence aggregation tool that extracts and normalizes indicators from multiple sources (OSINT feeds, malware reports) into a…
curated-intel/ukraine-cyber-operationsCurated Intelligence is working with analysts from around the world to provide useful information to organisations in Ukraine looking for additional…
essexrich/threatactors-ttpsRepository created to share information about tactics, techniques and procedures used by threat actors. Initially with ransomware groups and evolving…
stamparm/maltrailReal-time malicious traffic detection system using public blacklists, static malware trails, and heuristic analysis to identify threats across DNS,…
pirxthepilot/wtfisPassive hostname, domain and IP lookup tool for non-robots
cred-club/artifAn advanced real time threat intelligence framework to identify threats and malicious web traffic on the basis of IP reputation and historical data.
cspf-founder/darwis-taxiiA high-performance TAXII (Trusted Automated eXchange of Indicator Information) server written in Rust.
emergingthreats/threatresearchProofpoint - Emerging Threats - Threat Research tools + publicly shared intel and documentation
mfmokbel/crawlectorCrawlector is a threat hunting framework designed for scanning websites for malicious objects.
rollwagen/abusechCLI client for abuse.ch
montysecurity/c2-trackerLive Feed of C2 servers, tools, and botnets
patrowl/patrowlhearsPatrowlHears - Vulnerability Intelligence Center / Exploits
expel-io/expel-intelThis is the home of the Expel Intel Team. Here, we will share IOCs and other information that is either not suitable for fitting into other mediums…
jpcertcc/phishurl-listCurated dataset of confirmed phishing URLs from JPCERT/CC, including confirmation date, full URL, and spoofed brand for threat intelligence and…
taxiiproject/libtaxiiA Python library for handling TAXII Messages invoking TAXII Services.
koala73/worldmonitorReal-time global intelligence dashboard. AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking in a unified situational…
fastfire/deepdarkctiCollection of Cyber Threat Intelligence sources from the deep and dark web
certtools/intelmqIntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
