1412 matches found
Cortex
Cortex tries to solve a common problem frequently encountered by SOCs, CSIRTs and security researchers in the course of threat intelligence, digital forensics and incident response: how to analyze observables they have collected, at scale , by querying a single tool instead of several? Cortex, an...
msticpy
MSTIC Jupyter and Python Security Tools Microsoft Threat Intelligence Python Security Tools. msticpy is a library for InfoSec investigation and hunting in Jupyter Notebooks. It includes functionality to: query log data from multiple sources enrich the data with Threat Intelligence, geolocations a...
misp-dashboard
misp-dashboard A dashboard showing live data and statistics from the ZMQ feeds of one or more MISP instances. The dashboard can be used as a real-time situational awareness tool to gather threat intelligence information. The misp-dashboard includes a gamification tool to show the contributions of...
BRIntelcollector
BRIntelcollector Overview The BRIntelcollector is a Cyber Threat Intelligence CTI tool focused on Brazilian national threat indicators. The tool allows searching and consolidating information about cyber threats through multiple intelligence sources, facilitating the creation of a centralized...
destroylist
Destroylist: Phishing & Scam Domain Blacklist...
dark-web-osint-tools
🕵️♂️ OSINT Tools for the Dark Web 🔎 Dark Web Search Engine Tools Katana - https://github.com/adnane-X-tebbaa/Katana OnionSearch - https://github.com/megadose/OnionSearch Darkdump - https://github.com/josh0xA/darkdump Ahmia Search Engine - ahmia.fi, https://github.com/ahmia/ahmia-site Darkus -...
OSweep
OSweep™ Don't Just Search OSINT. Sweep It. Description If you work in IT security, then you most likely use OSINT to help you understand what it is that your SIEM alerted you on and what everyone else in the world understands about it. More than likely you are using more than one OSINT service...
spiderfoot
SpiderFoot is an open source intelligence OSINT automation tool. It integrates with just about every data source available and utilises a range of methods for data analysis, making that data easy to navigate. SpiderFoot has an embedded web-server for providing a clean and intuitive web-based...
tirith
tirith Your browser would catch this. Your terminal won't. Website | Docs | SKILL.md | Changelog | Releases Independent open-source project, with hosting supported by the Vercel Open Source Program Spring 2026 Cohort. Can you spot the difference? root@kitploit: curl -sSL...
S1EM
Objectives Today, cyber attacks are more numerous and cause damage in companies. Nevertheless, many software products exist to detect cyber threats. The S1EM solution is based on the principle of bringing together the best products in their field, free of charge, and making them quickly...
opensquat
openSquat Core 📑 Table of Contents What is openSquat? Featured In Open-Core Model Key Features Quick Start Requirements Usage Premium and API Modes Configuration Automation CLI Reference Contributing Author License 🎯 What is openSquat? openSquat is an Open Source Intelligence OSINT security tool...
Threat-Intelligence-Alerts
Threat Intelligence Alerts Our Threat Intelligence team uses a range of sources and tools to monitor external reporting and carry out a daily review of this intelligence to identify changes to the threat landscape which requires action internally, whether this is in the form of additional...
HFish
HFish design concept HFish is a community free honeypot that focuses on enterprise security scenarios. It provides users with independently operable and practical functions from three scenarios: intranet loss detection, internet threat awareness, and threat intelligence production. It increases...
manuka
Manuka Description Manuka is an Open-source intelligence OSINT honeypot that monitors reconnaissance attempts by threat actors and generates actionable intelligence for Blue Teamers. It creates a simulated environment consisting of staged OSINT sources, such as social media profiles and leaked...
Spip-Go
Spip - Network Honeypot Sensor Spip is a lightweight, low-interaction network honeypot sensor. It listens for arbitrary incoming TCP traffic plain and TLS, captures what scanners and bots send, and logs each connection as structured JSON ECS-shaped for easy ingestion into your SIEM or data lake...
bumblebee
Threat Intelligence Exposure Catalogs Maintained exposure catalogs for recent supply-chain campaigns, built from public threat-intelligence reporting with Perplexity Computer and updated via PRs as fresh campaigns are reported. Pass a catalog to a scan with --exposure-catalog . Review the entries...
harpoon
Harpoon OSINT / थ्रेट इंटेल CLI टूल। स्थापना आवश्यकताएँ Harpoon के लिए पूर्व-आवश्यकता के रूप में, आपको lxml आवश्यकताओं को स्थापित करना होगा, Debian/Ubuntu पर: sudo apt-get install libxml2-dev libxslt-dev python3-dev। Fedora पर: sudo dnf install sqlite-devel automake bzip2 bzip2-devel bzip2-lib...
beelzebub
Beelzebub إطار عمل تشغيلي للخداع Beelzebub هو إطار عمل خداع مفتوح المصدر ينشر خدمات شرك تكيفية مدعومة بنماذج اللغات الكبيرة LLM عبر بروتوكولات SSH وHTTP وTCP وTELNET وMCP. يتجاوز مصائد العسل السلبية من خلال إشراك المهاجمين بنشاط في تفاعلات واقعية، وجمع استخبارات تهديدات عالية الدقة، واكتشاف هجمات...
yeti
Yeti Platform Yeti aims to bridge the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline for DFIR teams. It was born out of frustration of having to answer the question "where have I seen this artifact before?" or "how do I search for IOCs related t...