signature-base

Signature-Base Signature-Base is the YARA signature and IOC database for our scanners LOKI and THOR Lite Focus of Signature-Base 1. High quality YARA rules and IOCs with minimal false positives 2. Clear structure 3. Consistent rule format Directory Structure iocs - Simple IOC files CSV yara - YAR...

reconix

Reconix Reconnaissance Intelligence Engine | Leak Scanner | Threat Intelligence Suite 🔍 Deep Exposure Intelligence • ⚡ High-Signal Recon Engine ⚠️ LEGAL DISCLAIMER Reconix is designed EXCLUSIVELY for authorized security testing, bug bounty programs, and defensive research. ✅ DO scan targets you ow...

MISP

MISP - Threat Intelligence Sharing Platform MISP is an open source software solution for collecting, storing, distributing and sharing cyber security indicators and threats about cyber security incidents analysis and malware analysis. MISP is designed by and for incident analysts, security and IC...

Threat-Intelligence-Hunter

TIH is an intelligence tool that helps you in searching for IOCs across multiple openly available security feeds and some well known APIs. The idea behind the tool is to facilitate searching and storing of frequently added IOCs for creating your own set of indicators. Threat-Intelligence-Hunter...

zettelforge

ZettelForge The only agentic memory system built for cyber threat intelligence. When a senior analyst leaves, two or three years of context walks out with them — customer environments, prior investigations, actor TTPs, false-positive patterns, every hard-won "wait, we've seen this before."...

the-art-of-pivoting

The Art of Pivoting Techniques for Intelligence Analysts to Discover New Relationships in a Complex World PDF HTML EPUB Markdown Abstract This book explores how intelligence and cyber-security analysts can uncover hidden links between threat actor infrastructure and ongoing investigations by...

strafer

Strafer Elasticsearch infections are rising exponentially. The adversaries are exploiting open and exposed Elasticsearch interfaces to trigger infections in the cloud and non-cloud deployments. During this talk, we will release a tool named "STRAFER" to detect potential infections in the...

tools

Zscaler ThreatLabz Tools Tools developed by the Zscaler ThreatLabz Threat Intelligence team Follow us on Twitter: @Threatlabz Blog: https://www.zscaler.com/blogs/security-research...

SyntheticSun

SyntheticSun SyntheticSun is a defense-in-depth security automation and monitoring framework which utilizes threat intelligence, machine learning, managed AWS security services and, serverless technologies to continuously prevent, detect and respond to threats. You sleep in fragmented glass With...

ioc2rpz

ioc2rpz™ makes your threat intelligence actionable Table of Contents Short Summary Overview ioc2rpz™ is a place where threat intelligence meets DNS Architecture Overview How to use ioc2rpz™ ioc2rpz™ web interface Protocol Support Port Summary UDP Port 53 TCP Port 53 DNS over TLS / DoT Port 853 DN...

edge

Cloud edge - Whois for the Cloud Lookup an IP to find the cloud provider and other details based on the provider's published JSON, CSV, or text data Cloud edge is a recon tool focused on exploring cloud service providers. It can be used for cloud attribution and forensics, pentesting, bug bounty,...

ioc-finder

IOC Finder Parse indicators of compromise also known as "observables" or "network data" - e.g. urls, email addresses, etc from text. 📖 Documentation it's interactive! 💪 I'm looking for sponsorship for this project. I have a number of improvements and helpful features I'd like to add and would...

wiz-research-iocs

Wiz Research Public IOC Database This repo contains public indicators of compromise aggregated by Wiz Research...

Awesome-FOFA

Awesome-FOFA Library 📒 中文 README Get Started with FOFA A Beginner’s Guide How to Get Free F-point from FOFA? FOFA and AI Next-Generation Attack Surface Inventory: Free Trial Available! Basic scenario How to use FOFA to discover free LLM resources? Elevating FOFA Search Efficiency through Novel...

X-force

IBM X-Force Exchange library | IBM Security X-FORCE Exchange library in Python 3. Search: threatactivities, threatgroups, malwareanalysis, collector and industries. For others applications. See ---|--- Install pip3 install XForce Use Using you APIKEY make a basic authentication. See . After make ...

iocs

Zscaler ThreatLabz IOCs This repository contains Indicators of Compromise IOCs from the Zscaler ThreatLabz team. Follow us on Twitter: @Threatlabz Blog: https://www.zscaler.com/blogs/security-research...

statecraftcyber

Statecraft Cyber Intelligence Threat intelligence platform in Portuguese built from scratch as a personal Blue Team project. It aggregates data from global open sources and turns it into technical briefings, classified news, enriched CVEs, and structured IOCs — all in PT-BR, continuously updated...

ioc

IoC Threat Intel IoCs + bits and pieces of dark matter. Published by Gen Threat Labs. Licenses The content of this repository is released under the Detection Rule License DRL 1.1...

standalone_tdo

TDO Standalone Extractor A powerful, standalone command-line tool for extracting Cyber Threat Intelligence CTI from documents using Large Language Models with advanced structured output capabilities. 🚀 Features Multi-format Document Support : PDF, DOCX, TXT, and Markdown files Advanced LLM...

ARTIF

ARTIF ARTIF is a new advanced real time threat intelligence framework built that adds another abstraction layer on the top of MISP to identify threats and malicious web traffic on the basis of IP reputation and historical data. It also performs automatic enrichment and threat scoring by collectin...