auditd-attack
bfuzzy/auditd-attackA Linux Auditd rule set mapped to MITRE's Attack Framework
configuration-auditingdefensive-toolsintrusion-detection+2
824
bfuzzy/auditd-attackA Linux Auditd rule set mapped to MITRE's Attack Framework
stamparm/maltrailReal-time malicious traffic detection system using public blacklists, static malware trails, and heuristic analysis to identify threats across DNS,…
misp/misp-taxonomiesTaxonomies used in MISP taxonomy system and can be used by other information sharing tool.
misp/misp-objectsCurated JSON object templates that define MISP attributes and relationship types for structured threat intelligence sharing and interoperable IOC…
shirkdog/pulledporkPulled Pork for Snort and Suricata rule management (from Google code)
blevene/bandjacksCyber Threat Defense World Modeling
crowdsecurity/crowdsecOpen-source IDS/IPS and WAF engine that analyzes logs and HTTP requests to detect and block malicious IPs, leveraging a crowdsourced community…
vxunderground/threatintelligencediscordbotGets updates from various clearnet domains and ransomware threat actor domains
payloadsecurity/sandbox_scryerParses public sandbox detonation reports to produce threat hunting intelligence, organizes findings via MITRE ATT&CK, assembles IOCs, and generates…
nktris/htsocReproducible SOC lab for CVE-2024-4577 detection and response
toborrm9/malicious_extension_sentryMalicious Extension Database
the-art-of-hacking/h4ckerCurated collection of cybersecurity resources, labs, and training materials covering ethical hacking, penetration testing, exploit development,…
koala73/worldmonitorReal-time global intelligence dashboard. AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking in a unified situational…
fastfire/deepdarkctiCollection of Cyber Threat Intelligence sources from the deep and dark web
hslatman/awesome-threat-intelligenceCurated directory of threat intelligence sources, feeds, frameworks, tools, and research for SOC/CTI teams—covering IOCs, STIX/TAXII formats, and…
misp/mispMISP (core software) - Open Source Threat Intelligence and Sharing Platform
mandiant/capaRule-based static and dynamic analysis tool that identifies capabilities in PE, ELF, .NET, and shellcode files, mapping them to MITRE ATT&CK…