TelemetrySource

TelemetrySource Project created to map functions repsonsible for triggering events from various telemetry sources. Main Mapping Sheet: Event Mapping Google Sheet Currently mapped sources: Sysmon Window Security Events Microsoft-Windows-Security-Auditing Threat Intelligence Events...

Awesome_Malware_Techniques

Awesome Malware Techniques A curated list of resources to analyse and study malware techniques. Unprotect: Unprotect is an open malware evasion techniques database that provides code snippet and detection rules. LolBas: Living Off The Land Binaries, Scripts and Libraries. ORKL: Search engine for...

abusech

abusech ThreatFox is an open threat intelligence sharing platform, allowing anyone to share indicators of compromise IOCs. This repository provides a command-line tool CLI to interact with the ThreatFox API. Install and run Brew brew tap rollwagen/homebrew-tap brew install rollwagen/tap/abusech G...

ransomwatch

ransomwatch 👀 🦅 ransomwatch trails the extortion sites used by ransomware groups and surfaces an aggregated feed of claims please use the issue template when submitting new groups ⚠️ content withinransomwatch.telemetry.ltd, posts.json, groups.json alongside the docs/ & source/ directories is...

dugganusa-ietf

DugganUSA — IETF Hackathon Contributions Real-world threat-intelligence contributions from DugganUSA LLC to the IETF Hackathon, offered to project champions as empirical grounding for standards work. We are a bootstrapped threat-intelligence shop. We run a public STIX 2.1 feed, an edge-blocking...

reconix

Reconix Reconnaissance Intelligence Engine | Leak Scanner | Threat Intelligence Suite 🔍 Deep Exposure Intelligence • ⚡ High-Signal Recon Engine ⚠️ LEGAL DISCLAIMER Reconix is designed EXCLUSIVELY for authorized security testing, bug bounty programs, and defensive research. ✅ DO scan targets you ow...

tools

Zscaler ThreatLabz Tools Tools developed by the Zscaler ThreatLabz Threat Intelligence team Follow us on Twitter: @Threatlabz Blog: https://www.zscaler.com/blogs/security-research...

klara

GReAT's KLara project KLara project is aimed at helping Threat Intelligence researchers hunt for new malware using Yara. In order to hunt efficiently for malware, one needs a large collection of samples to search over. Researchers usually need to fire a Yara rule over a collection / set of...

google-dorks

google-dorks Update Jan 2026 Read this, my Medium Blog Space:👩‍💻Proviesec Security Medium Articles - read it Table of Contents Introduction My love google dork Search filters Operators Search Term OR Ideas Links Example Preventing GOOGLE DORKS Introduction ⭐ Star us on GitHub — it motivates a lot!...

ioc-finder

IOC Finder Parse indicators of compromise also known as "observables" or "network data" - e.g. urls, email addresses, etc from text. 📖 Documentation it's interactive! 💪 I'm looking for sponsorship for this project. I have a number of improvements and helpful features I'd like to add and would...

iocs

Zscaler ThreatLabz IOCs This repository contains Indicators of Compromise IOCs from the Zscaler ThreatLabz team. Follow us on Twitter: @Threatlabz Blog: https://www.zscaler.com/blogs/security-research...

statecraftcyber

Statecraft Cyber Intelligence 포르투갈어로 처음부터 개인 Blue Team 프로젝트로 구축한 위협 인텔리전스 플랫폼. 글로벌 오픈 소스에서 데이터를 수집하여 기술 브리핑, 분류된 뉴스, 강화된 CVE, 구조화된 IOC로 변환합니다 — 모두 PT-BR로 지속적으로 업데이트됩니다. 사이트: statecraftcyber.vercel.app 플랫폼이 제공하는 것 Threat Briefings — AIGroq / LLaMA 3.3 70B가 매시간 생성하는 기술 문서로, 심각도, IOC, CVE 및 Blue Tea...

ioc

IoC Threat Intel IoCs + bits and pieces of dark matter. Published by Gen Threat Labs. Licenses The content of this repository is released under the Detection Rule License DRL 1.1...

standalone_tdo

TDO Standalone Extractor A powerful, standalone command-line tool for extracting Cyber Threat Intelligence CTI from documents using Large Language Models with advanced structured output capabilities. 🚀 Features Multi-format Document Support : PDF, DOCX, TXT, and Markdown files Advanced LLM...

ssh-honeypot-research

🍯 Honeypot SSH — Investigación e Inteligencia de Amenazas Un honeypot Cowrie de interacción media desplegado en un VPS Linux alquilado con internet pública, diseñado para atraer, registrar y analizar tráfico real de fuerza bruta SSH. Durante una ventana de captura de 8 días, el sensor registró...

osintnet-public

OsintNET is a browser-based OSINT platform for domain intelligence, website risk scanning, SERP discovery, email and username OSINT, image intelligence, image authenticity checks and AI image detection. Website · OSINT Tools · Best OSINT Tools · AI OSINT Tools · llms.txt · AI Prompt Map OsintNET ...

Insights from the 2026 Microsoft Digital Defense Report

Every year, the Microsoft Digital Defense Report gives us an opportunity to step back from individual threats and look broadly at what Microsoft’s security and threat intelligence teams are seeing. Today, we released the 2026 Report, which reflects a security environment that continues to grow mo...

NetAlertX v26.10.0

NetAlertX - Network Visibility & Asset Intelligence Framework !mainmain 📷 Click for more screenshots !Main screenmain| !devicedetails 1devicedetails| !Screen networknetwork ---|---|--- !presencepresence| !maintenancemaintenance| !settingssettings !synchubsynchub| !report1report1|...

CVE-2026-103659: Missing Authorization

MISP contains an authorization bypass in the event flattening feature. When a user requests an event with the flatten option enabled, the application removes the Object containment from the query and returns object attributes as top-level event attributes. In doing so, the object-level distributi...

PT-2026-103735

MISP contains an authorization bypass in the event flattening feature. When a user requests an event with the flatten option enabled, the application removes the Object containment from the query and returns object attributes as top-level event attributes. In doing so, the object-level distributi...