Trending repositories for topic cyber-threat-intelligence

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

A FREE Windows C development course where we will learn the Win32API and reverse engineer each step utilizing IDA Free in both an x86 and x64 environment.

IntelOwl: manage your Threat Intelligence at scale

Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by developing a representation of attack flows, modeling attack flows f...

Web app that provides basic navigation and annotation of ATT&CK matrices

Chista | Open Threat Intelligence Framework

CTI Blueprints is a free suite of templates and tools that helps Cyber Threat Intelligence analysts create high-quality, actionable reports more consistently and efficiently.

STIX data representing MITRE ATT&CK

Cyber Analytics Repository

Chista | Open Threat Intelligence Framework

CTI Blueprints is a free suite of templates and tools that helps Cyber Threat Intelligence analysts create high-quality, actionable reports more consistently and efficiently.

Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by developing a representation of attack flows, modeling attack flows f...

STIX data representing MITRE ATT&CK

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

A FREE Windows C development course where we will learn the Win32API and reverse engineer each step utilizing IDA Free in both an x86 and x64 environment.

Cyber Analytics Repository

IntelOwl: manage your Threat Intelligence at scale

Web app that provides basic navigation and annotation of ATT&CK matrices

A FREE Windows C development course where we will learn the Win32API and reverse engineer each step utilizing IDA Free in both an x86 and x64 environment.

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

IntelOwl: manage your Threat Intelligence at scale

Cyber Threat Intelligence Repository expressed in STIX 2.0

This Repository is a collection of different ethical hacking tools and malware's for penetration testing and research purpose written in python, ruby, rust, c++, go and c.

Web app that provides basic navigation and annotation of ATT&CK matrices

Lists of addresses of the most active C2, Botnets, Zombies, Scanners in European Cyber Space

Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by developing a representation of attack flows, modeling attack flows f...

A python module for working with ATT&CK

This directory features proven systems that demonstrate value to your threat-informed efforts using metrics.

Cyber Analytics Repository

The DNA test for websites

Chista | Open Threat Intelligence Framework

This comprehensive and central repository is designed for cybersecurity enthusiasts, researchers, and professionals seeking to stay ahead in the field. It provides a valuable resource for those dedica...

Signature based honeypot detector tool written in Golang

CTI Blueprints is a free suite of templates and tools that helps Cyber Threat Intelligence analysts create high-quality, actionable reports more consistently and efficiently.

STIX data representing MITRE ATT&CK

MITRE ATT&CK Website

Collection of awesome resources on intelligence writing, including manuals/guides, standards, books, tranings, articles, videos, etc

Cortex: a Powerful Observable Analysis and Active Response Engine

This Repository is a collection of different ethical hacking tools and malware's for penetration testing and research purpose written in python, ruby, rust, c++, go and c.

The DNA test for websites

This directory features proven systems that demonstrate value to your threat-informed efforts using metrics.

Chista | Open Threat Intelligence Framework

Lists of addresses of the most active C2, Botnets, Zombies, Scanners in European Cyber Space

This comprehensive and central repository is designed for cybersecurity enthusiasts, researchers, and professionals seeking to stay ahead in the field. It provides a valuable resource for those dedica...

Signature based honeypot detector tool written in Golang

A FREE Windows C development course where we will learn the Win32API and reverse engineer each step utilizing IDA Free in both an x86 and x64 environment.

A python module for working with ATT&CK

Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by developing a representation of attack flows, modeling attack flows f...

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

CTI Blueprints is a free suite of templates and tools that helps Cyber Threat Intelligence analysts create high-quality, actionable reports more consistently and efficiently.

STIX data representing MITRE ATT&CK

Cyber Threat Intelligence Repository expressed in STIX 2.0

Cyber Analytics Repository

IntelOwl: manage your Threat Intelligence at scale

MITRE ATT&CK Website

Web app that provides basic navigation and annotation of ATT&CK matrices

Collection of awesome resources on intelligence writing, including manuals/guides, standards, books, tranings, articles, videos, etc

Cortex: a Powerful Observable Analysis and Active Response Engine

IntelOwl: manage your Threat Intelligence at scale

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

This Repository is a collection of different ethical hacking tools and malware's for penetration testing and research purpose written in python, ruby, rust, c++, go and c.

A FREE Windows C development course where we will learn the Win32API and reverse engineer each step utilizing IDA Free in both an x86 and x64 environment.

Web app that provides basic navigation and annotation of ATT&CK matrices

A python module for working with ATT&CK

Cyber Threat Intelligence Repository expressed in STIX 2.0

Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by developing a representation of attack flows, modeling attack flows f...

Cortex: a Powerful Observable Analysis and Active Response Engine

Lists of addresses of the most active C2, Botnets, Zombies, Scanners in European Cyber Space

The DNA test for websites

STIX data representing MITRE ATT&CK

TRAM is an open-source platform designed to advance research into automating the mapping of cyber threat intelligence reports to MITRE ATT&CK®.

Collection of awesome resources on intelligence writing, including manuals/guides, standards, books, tranings, articles, videos, etc

Signature based honeypot detector tool written in Golang

MITRE ATT&CK Website

This comprehensive and central repository is designed for cybersecurity enthusiasts, researchers, and professionals seeking to stay ahead in the field. It provides a valuable resource for those dedica...

pretrained BERT model for cyber security text, learned CyberSecurity Knowledge

Cyber Analytics Repository

Pythia is a versatile query format designed to facilitate the discovery of malicious infrastructure by seamlessly converting into the syntax of popular search engines.

This Repository is a collection of different ethical hacking tools and malware's for penetration testing and research purpose written in python, ruby, rust, c++, go and c.

The DNA test for websites

Pythia is a versatile query format designed to facilitate the discovery of malicious infrastructure by seamlessly converting into the syntax of popular search engines.

Signature based honeypot detector tool written in Golang

Alguns links legais para quem gostaria de entender mais sobre os fundamentos de CTI. Pra quem gostaria de contribuir, só aceitarei PR relacionado a conteúdos teóricos, como blogs, podcasts, videos, li...

This comprehensive and central repository is designed for cybersecurity enthusiasts, researchers, and professionals seeking to stay ahead in the field. It provides a valuable resource for those dedica...

Lists of addresses of the most active C2, Botnets, Zombies, Scanners in European Cyber Space

IOC Data Obtained From Karakurt Hacking Team's Internal Infrastructure

A python module for working with ATT&CK

Further investigation in to APT campaigns disclosed by private security firms and security agencies

STIX data representing MITRE ATT&CK

This directory features proven systems that demonstrate value to your threat-informed efforts using metrics.

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by developing a representation of attack flows, modeling attack flows f...

pretrained BERT model for cyber security text, learned CyberSecurity Knowledge

Chista | Open Threat Intelligence Framework

IntelOwl: manage your Threat Intelligence at scale

TRAM is an open-source platform designed to advance research into automating the mapping of cyber threat intelligence reports to MITRE ATT&CK®.

A FREE Windows C development course where we will learn the Win32API and reverse engineer each step utilizing IDA Free in both an x86 and x64 environment.

Cyber Threat Intelligence Data, Indicators, and Analysis

Signature based honeypot detector tool written in Golang

This comprehensive and central repository is designed for cybersecurity enthusiasts, researchers, and professionals seeking to stay ahead in the field. It provides a valuable resource for those dedica...

Modular web-application honeypot platform built using go and gin

The DNA test for websites

Pythia is a versatile query format designed to facilitate the discovery of malicious infrastructure by seamlessly converting into the syntax of popular search engines.

IntelOwl: manage your Threat Intelligence at scale

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

Web app that provides basic navigation and annotation of ATT&CK matrices

Cyber Threat Intelligence Repository expressed in STIX 2.0

Cortex: a Powerful Observable Analysis and Active Response Engine

A python module for working with ATT&CK

A FREE Windows C development course where we will learn the Win32API and reverse engineer each step utilizing IDA Free in both an x86 and x64 environment.

Lists of addresses of the most active C2, Botnets, Zombies, Scanners in European Cyber Space

TRAM is an open-source platform designed to advance research into automating the mapping of cyber threat intelligence reports to MITRE ATT&CK®.

Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by developing a representation of attack flows, modeling attack flows f...

STIX data representing MITRE ATT&CK

CTI Blueprints is a free suite of templates and tools that helps Cyber Threat Intelligence analysts create high-quality, actionable reports more consistently and efficiently.

Collection of awesome resources on intelligence writing, including manuals/guides, standards, books, tranings, articles, videos, etc

This Repository is a collection of different ethical hacking tools and malware's for penetration testing and research purpose written in python, ruby, rust, c++, go and c.

Signature based honeypot detector tool written in Golang

Cyber Analytics Repository

This directory features proven systems that demonstrate value to your threat-informed efforts using metrics.

MITRE ATT&CK Website

This comprehensive and central repository is designed for cybersecurity enthusiasts, researchers, and professionals seeking to stay ahead in the field. It provides a valuable resource for those dedica...

🚨ATTENTION🚨 The NIST 800-53 mappings have migrated to the Center’s Mappings Explorer project. See README below. This repository is kept here as an archive.

Modular web-application honeypot platform built using go and gin

The DNA test for websites

Secutils.dev is an open-source, versatile, yet simple security toolbox for engineers and researchers

Pythia is a versatile query format designed to facilitate the discovery of malicious infrastructure by seamlessly converting into the syntax of popular search engines.

This directory features proven systems that demonstrate value to your threat-informed efforts using metrics.

Lists of addresses of the most active C2, Botnets, Zombies, Scanners in European Cyber Space

Chista | Open Threat Intelligence Framework

A collection of awesome framework, libraries, learning tutorials, videos, webcasts, technical resources and cool stuff about Security Orchestration, Automation and Response (SOAR).

CTI Blueprints is a free suite of templates and tools that helps Cyber Threat Intelligence analysts create high-quality, actionable reports more consistently and efficiently.

A python module for working with ATT&CK

pretrained BERT model for cyber security text, learned CyberSecurity Knowledge

STIX data representing MITRE ATT&CK

TRAM is an open-source platform designed to advance research into automating the mapping of cyber threat intelligence reports to MITRE ATT&CK®.

Cloud Analytics helps defenders detect attacks to their cloud infrastructure by developing behavioral analytics for cloud platforms as well as a blueprint for how others can create and use cloud analy...

Suricata rules for network anomaly detection

Cyber Threat Intelligence Data, Indicators, and Analysis

Associated-Threat-Analyzer detects malicious IPv4 addresses and domain names associated with your web application using local malicious domain and IPv4 lists.

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

IntelOwl: manage your Threat Intelligence at scale

Extracting Attack Behavior from Threat Reports