opencve
opencve/opencveAggregate, filter, and track CVEs from multiple sources with team collaboration, custom dashboards, alerts, and AI-powered analysis for vulnerability…
incident-responseioc-managementthreat-intelligence+2
2.8k
opencve/opencveAggregate, filter, and track CVEs from multiple sources with team collaboration, custom dashboards, alerts, and AI-powered analysis for vulnerability…
bytedance/elkeidElkeid is an open source solution that can meet the security requirements of various workloads such as hosts, containers and K8s, and serverless. It…
sophoslabs/iocsSophos-originated indicators-of-compromise from published reports
amnestytech/investigationsIndicators of Compromise from Amnesty International's cyber investigations
aboutcode-org/vulnerablecodeOpen-source vulnerability database aggregating CVE data from multiple sources with a web UI and API. Maps vulnerabilities to specific software…
mandiant/flare-learning-hubFree educational content on reverse engineering and malware analysis from the FLARE team
paloaltonetworks/unit42-timely-threat-intelA collection of files with indicators supporting social media posts from Palo Alto Network's Unit 42 team to disseminate timely threat intelligence.
inquest/malware-samplesA collection of malware samples and relevant dissection information, most probably referenced from http://blog.inquest.net
binref/refineryComposable command-line toolkit for malware triage and binary analysis: decode, decrypt, carve, and extract indicators from malicious files and…
pedramamini/threatingestorAutomated threat intelligence aggregation tool that extracts and normalizes indicators from multiple sources (OSINT feeds, malware reports) into a…
volexity/threat-intelSignatures and IoCs from public Volexity blog posts.
curated-intel/ukraine-cyber-operationsCurated Intelligence is working with analysts from around the world to provide useful information to organisations in Ukraine looking for additional…
stanfrbd/cyberbroA simple application that extracts your IoCs from garbage input and checks their reputation using multiple CTI services.
criticalpathsecurity/zeek-intelligence-feedsAggregated Zeek-format threat intelligence feeds with combined indicators from public and curated sources for continuous IDS and network threat…
invictus-ir/microsoft-extractor-suiteA PowerShell module for acquisition of data from Microsoft 365 and Azure for Incident Response and Cyber Security purposes.
0x4d31/fattFATT /fingerprintAllTheThings - a pyshark based script for extracting network metadata and fingerprints from pcap files and live network traffic
cyberdefenders/detectionlabelkDetectionLabELK is a fork from DetectionLab with ELK stack instead of Splunk.
mandiant/vulnerability-disclosuresCurated repository of vulnerability disclosures from Mandiant, including CVEs discovered through internal research, red team assessments, and wild…