Trending repositories for topic cyber-threat-intelligence

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

Web app that provides basic navigation and annotation of ATT&CK matrices

Pythia is a versatile query format designed to facilitate the discovery of malicious infrastructure by seamlessly converting into the syntax of popular search engines.

Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by developing a representation of attack flows, modeling attack flows f...

Cortex: a Powerful Observable Analysis and Active Response Engine

Pythia is a versatile query format designed to facilitate the discovery of malicious infrastructure by seamlessly converting into the syntax of popular search engines.

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by developing a representation of attack flows, modeling attack flows f...

Web app that provides basic navigation and annotation of ATT&CK matrices

Cortex: a Powerful Observable Analysis and Active Response Engine

A simple application that extracts your IoCs from garbage input and checks their reputation using multiple CTI services.

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by developing a representation of attack flows, modeling attack flows f...

Web app that provides basic navigation and annotation of ATT&CK matrices

Cortex: a Powerful Observable Analysis and Active Response Engine

Cyber Threat Intelligence Repository expressed in STIX 2.0

A python module for working with ATT&CK

IntelOwl: manage your Threat Intelligence at scale

Pythia is a versatile query format designed to facilitate the discovery of malicious infrastructure by seamlessly converting into the syntax of popular search engines.

Signature based honeypot detector tool written in Golang

Intelligence Blocklist (IPv4). DST = France & Belgium

Pythia is a versatile query format designed to facilitate the discovery of malicious infrastructure by seamlessly converting into the syntax of popular search engines.

A simple application that extracts your IoCs from garbage input and checks their reputation using multiple CTI services.

Signature based honeypot detector tool written in Golang

Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by developing a representation of attack flows, modeling attack flows f...

Intelligence Blocklist (IPv4). DST = France & Belgium

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

A python module for working with ATT&CK

Cortex: a Powerful Observable Analysis and Active Response Engine

Web app that provides basic navigation and annotation of ATT&CK matrices

Cyber Threat Intelligence Repository expressed in STIX 2.0

IntelOwl: manage your Threat Intelligence at scale

Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by developing a representation of attack flows, modeling attack flows f...

A simple application that extracts your IoCs from garbage input and checks their reputation using multiple CTI services.

Web app that provides basic navigation and annotation of ATT&CK matrices

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

Cortex: a Powerful Observable Analysis and Active Response Engine

Intelligence Blocklist (IPv4). DST = France & Belgium

IntelOwl: manage your Threat Intelligence at scale

Cyber Threat Intelligence Repository expressed in STIX 2.0

This Repository is a collection of different ethical hacking tools and malware's for penetration testing and research purpose written in python, ruby, rust, c++, go and c.

A curated collection of free or freemium web-based penetration testing and vulnerability analysis tools. These tools assist security professionals and enthusiasts in discovering, assessing, and managi...

CTI Blueprints is a free suite of templates and tools that helps Cyber Threat Intelligence analysts create high-quality, actionable reports more consistently and efficiently.

A python module for working with ATT&CK

STIX data representing MITRE ATT&CK

TRAM is an open-source platform designed to advance research into automating the mapping of cyber threat intelligence reports to MITRE ATT&CK®.

Raw data from Threat Intelligence Reports with automatic reports collection and keyword search across thousands of reports

MITRE ATT&CK Website

A FREE Windows C development course where we will learn the Win32API and reverse engineer each step utilizing IDA Free in both an x86 and x64 environment.

Signature based honeypot detector tool written in Golang

A collection of awesome framework, libraries, learning tutorials, videos, webcasts, technical resources and cool stuff about Security Orchestration, Automation and Response (SOAR).

Suricata rules for network anomaly detection

A curated collection of free or freemium web-based penetration testing and vulnerability analysis tools. These tools assist security professionals and enthusiasts in discovering, assessing, and managi...

A simple application that extracts your IoCs from garbage input and checks their reputation using multiple CTI services.

Automated threat intel feed parsing and consolidation💻👾🤖

Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by developing a representation of attack flows, modeling attack flows f...

Intelligence Blocklist (IPv4). DST = France & Belgium

To be used with tools like GoBuster & DirBuster but these lists are specifically tailored and designed for scanning phishing <>< landing pages and other malicious or sketch af financial/crypto fraud w...

Raw data from Threat Intelligence Reports with automatic reports collection and keyword search across thousands of reports

Signature based honeypot detector tool written in Golang

A collection of awesome framework, libraries, learning tutorials, videos, webcasts, technical resources and cool stuff about Security Orchestration, Automation and Response (SOAR).

CTI Blueprints is a free suite of templates and tools that helps Cyber Threat Intelligence analysts create high-quality, actionable reports more consistently and efficiently.

This Repository is a collection of different ethical hacking tools and malware's for penetration testing and research purpose written in python, ruby, rust, c++, go and c.

Suricata rules for network anomaly detection

OASIS TC Open Repository: Lightweight visualization for STIX 2.0 objects and relationships

STIX data representing MITRE ATT&CK

Web app that provides basic navigation and annotation of ATT&CK matrices

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

Cyber Threat Intelligence Data, Indicators, and Analysis

Cortex: a Powerful Observable Analysis and Active Response Engine

A python module for working with ATT&CK

TRAM is an open-source platform designed to advance research into automating the mapping of cyber threat intelligence reports to MITRE ATT&CK®.

A simple application that extracts your IoCs from garbage input and checks their reputation using multiple CTI services.

Raw data from Threat Intelligence Reports with automatic reports collection and keyword search across thousands of reports

The DNA test for websites

A curated collection of free or freemium web-based penetration testing and vulnerability analysis tools. These tools assist security professionals and enthusiasts in discovering, assessing, and managi...

Extracts IoCs, TTPs and the relationships between them. Outputs a STIX 2.1 bundle.

Pythia is a versatile query format designed to facilitate the discovery of malicious infrastructure by seamlessly converting into the syntax of popular search engines.

IntelOwl: manage your Threat Intelligence at scale

This Repository is a collection of different ethical hacking tools and malware's for penetration testing and research purpose written in python, ruby, rust, c++, go and c.

A simple application that extracts your IoCs from garbage input and checks their reputation using multiple CTI services.

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

Web app that provides basic navigation and annotation of ATT&CK matrices

Cyber Threat Intelligence Repository expressed in STIX 2.0

Cortex: a Powerful Observable Analysis and Active Response Engine

A python module for working with ATT&CK

A FREE Windows C development course where we will learn the Win32API and reverse engineer each step utilizing IDA Free in both an x86 and x64 environment.

Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by developing a representation of attack flows, modeling attack flows f...

Intelligence Blocklist (IPv4). DST = France & Belgium

Raw data from Threat Intelligence Reports with automatic reports collection and keyword search across thousands of reports

STIX data representing MITRE ATT&CK

This comprehensive and central repository is designed for cybersecurity enthusiasts, researchers, and professionals seeking to stay ahead in the field. It provides a valuable resource for those dedica...

TRAM is an open-source platform designed to advance research into automating the mapping of cyber threat intelligence reports to MITRE ATT&CK®.

Collection of awesome resources on intelligence writing, including manuals/guides, standards, books, tranings, articles, videos, etc

CTI Blueprints is a free suite of templates and tools that helps Cyber Threat Intelligence analysts create high-quality, actionable reports more consistently and efficiently.

Cyber Analytics Repository

The DNA test for websites

MITRE ATT&CK Website

This Repository is a collection of different ethical hacking tools and malware's for penetration testing and research purpose written in python, ruby, rust, c++, go and c.

The DNA test for websites

This repository contains 130 malware and ransomware samples for research and analysis purposes.

This comprehensive and central repository is designed for cybersecurity enthusiasts, researchers, and professionals seeking to stay ahead in the field. It provides a valuable resource for those dedica...

Pythia is a versatile query format designed to facilitate the discovery of malicious infrastructure by seamlessly converting into the syntax of popular search engines.

To be used with tools like GoBuster & DirBuster but these lists are specifically tailored and designed for scanning phishing <>< landing pages and other malicious or sketch af financial/crypto fraud w...

Automated threat intel feed parsing and consolidation💻👾🤖

Intelligence Blocklist (IPv4). DST = France & Belgium

A collection of awesome software, libraries, learning tutorials, documents and books, technical resources and cool stuff about Blue Team in Cybersecurity.

CTI Blueprints is a free suite of templates and tools that helps Cyber Threat Intelligence analysts create high-quality, actionable reports more consistently and efficiently.

Signature based honeypot detector tool written in Golang

A python module for working with ATT&CK

A collection of awesome framework, libraries, learning tutorials, videos, webcasts, technical resources and cool stuff about Security Orchestration, Automation and Response (SOAR).

STIX data representing MITRE ATT&CK

pretrained BERT model for cyber security text, learned CyberSecurity Knowledge

IntelOwl: manage your Threat Intelligence at scale

STIX2 graph visualisation library in JS

This directory features proven systems that demonstrate value to your threat-informed efforts using metrics.

Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by developing a representation of attack flows, modeling attack flows f...

Cyber Threat Intelligence Data, Indicators, and Analysis