Tools

payloadsecurity/sandbox_scryer

Parses public sandbox detonation reports to produce threat hunting intelligence, organizes findings via MITRE ATT&CK, assembles IOCs, and generates…

bfuzzy/auditd-attack

A Linux Auditd rule set mapped to MITRE's Attack Framework

koala73/worldmonitor

Real-time global intelligence dashboard. AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking in a unified situational…

reloading01/certstream-server-rust

High-performance Certificate Transparency (CT) monitoring tool written in Rust. Real-time stream of newly issued SSL/TLS certificates from CT logs.…

stamparm/maltrail

Real-time malicious traffic detection system using public blacklists, static malware trails, and heuristic analysis to identify threats across DNS,…

toborrm9/malicious_extension_sentry

Malicious Extension Database

vxunderground/threatintelligencediscordbot

Gets updates from various clearnet domains and ransomware threat actor domains

vulncheck-oss/cli

VulnCheck's official command line tool