Tools

shirkdog/pulledpork

Pulled Pork for Snort and Suricata rule management (from Google code)

misp/misp-objects

Curated JSON object templates that define MISP attributes and relationship types for structured threat intelligence sharing and interoperable IOC…

rxerium/honeypot

🍯Honeypot Threat Intel

stamusnetworks/scirius

Web interface for Suricata ruleset management, threat hunting, and rule tuning with multi-source feed aggregation, transformation, and activity…

cve-search/cve-search

Local CVE/CPE vulnerability database with search, ranking, web interface, and API for offline vulnerability analysis and management.

inquest/threatkb

Knowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)

bert-janp/open-source-threat-intel-feeds

This repository contains Open Source freely usable Threat Intel feeds that can be used without additional requirements. Contains multiple types such…

paloaltonetworks/unit42-timely-threat-intel

A collection of files with indicators supporting social media posts from Palo Alto Network's Unit 42 team to disseminate timely threat intelligence.

certtools/intelmq

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

curated-intel/ukraine-cyber-operations

Curated Intelligence is working with analysts from around the world to provide useful information to organisations in Ukraine looking for additional…

mitre-attack/attack-stix-data

STIX 2.1 collections of the MITRE ATT&CK knowledge base, providing adversary tactics and techniques for enterprise, mobile, and ICS threat…

cisco-talos/iocs

Indicators of Compromise

gendigitalinc/ioc

Threat Intel IoCs + bits and pieces of dark matter. Published by Gen Threat Labs.

volexity/threat-intel

Signatures and IoCs from public Volexity blog posts.

randomuserid/adama

Searches For Threat Hunting and Security Analytics

eclecticiq/opentaxii

TAXII server implementation in Python from EclecticIQ