crowdsecurity/crowdsecOpen-source IDS/IPS and WAF engine that analyzes logs and HTTP requests to detect and block malicious IPs, leveraging a crowdsourced community…
certtools/intelmqIntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
curated-intel/ukraine-cyber-operationsCurated Intelligence is working with analysts from around the world to provide useful information to organisations in Ukraine looking for additional…
threatlabz/iocsThis repository is for Indicators of Compromise (IOCs) from Zscaler ThreatLabz public reports
mfmokbel/crawlectorCrawlector is a threat hunting framework designed for scanning websites for malicious objects.
olizimmermann/phishcollectorPhishCollector is a research framework for collecting, analysing, and tracking phishing sites.
expel-io/expel-intelThis is the home of the Expel Intel Team. Here, we will share IOCs and other information that is either not suitable for fitting into other mediums…
nict-csl/existEXIST is a web application for aggregating and analyzing cyber threat intelligence.
ciscocsirt/gosintThe GOSINT framework is a project used for collecting, processing, and exporting high quality indicators of compromise (IOCs).
fastfire/deepdarkctiCollection of Cyber Threat Intelligence sources from the deep and dark web
misp/mispMISP (core software) - Open Source Threat Intelligence and Sharing Platform
stamparm/maltrailReal-time malicious traffic detection system using public blacklists, static malware trails, and heuristic analysis to identify threats across DNS,…
neo23x0/signature-baseYARA signature and IOC database for my scanners and tools
phishdestroy/destroylistReal-time phishing & scam domain blocklist - 208k+ curated threats, 1M+ community, free API, multiple formats
ransomlook/ransomlookYet another Ransomware gang tracker
pirxthepilot/wtfisPassive hostname, domain and IP lookup tool for non-robots