threat-intel

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

A curated list of Awesome Threat Intelligence Blogs

Bringing you the best of the worst files on the Internet.

A community-driven repository for threat hunting ideas, methodologies, and research that serves as a central gathering place for hunters to share knowledge, collaborate on techniques, and advance the field of threat hunting.

Set of Maltego transforms to inferface with a MISP Threat Sharing instance, and also to explore the whole MITRE ATT&CK dataset.

Threat-Intel repository. API: https://github.com/davidonzo/apiosintDS

Turn any blog into structured threat intelligence.

Spydi ThreatIntel Feed is built on open-source threat intelligence, community-maintained blocklists, and public security research.

Collection of Suricata rule sets that I use modified to my environments.

Operational Relay Box Intelligence, Tracking, & Analysis Lexicon (ORBITAL)

YAFRA is a semi-automated framework for analyzing and representing reports about IT Security incidents.

infosec-vocabulary is a bilingual (English ↔ Bangla) cybersecurity glossary with concise definitions, synonyms, real-world examples, and short educational notes for each term. Alphabetized and workshop‑friendly, it’s ideal for learners, translators, SOC trainees, and security educators; docs-ready and GitHub Pages compatible.

Decentralized Cyber Threat Intelligence Kaizen Framework

Web-based IOC management platform with threat intelligence enrichment for SOC teams

PoC for Exploiting CVE-2024-31848/49/50/51 - File Path Traversal

Generate YARA rules from Windows API hashes for malware detection and hunting.

An SSH honeypot written entirely in Go.

This repository contains hands-on Jupyter notebooks for learning threat intelligence analysis using CIRCL's open source tools and services. The workshop covers essential platforms and APIs for cybersecurity professionals and researchers.

Ekoparty's BlueSpace Keynote November 2021. Shoutout to @plugxor Muchas Gracias!!!

Cross-platform desktop client for the public JLab static JAR scanner. Drop a .jar (or .zip / .mcpack / .mrpack), get the matched signatures grouped by severity.