Python CLI tool for rapid IOC analysis (IPs, Domains, CVEs) using 6 free Threat Intel APIs. Outputs: Color-coded Excel, JSON, CSV. Uses: VT, Shodan, AbuseIPDB.
☆27Oct 28, 2026Updated last week
Alternatives and similar repositories for ThreatLens
Users that are interested in ThreatLens are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Autonomous 23-Source Zero-Cost OSINT, Binary Image Forensics (EXIF/GPS/Stego), Data Breach/Leak & Threat Intelligence Engine in Pure Pyth…☆28Updated this week
- ⚡ Rust-accelerated temporal graph engine for cybersecurity threat hunting. Ingests 100M+ edges from PCAP/CSV on a single machine. Sub-sec…☆15Jul 30, 2026Updated 3 months ago
- Synapse Rapid Power-up for SinkDB☆11Jun 24, 2025Updated last year
- Prevention-focused living-off-the-land testing framework mapped to MITRE ATT&CK.☆30Jul 24, 2026Updated 3 months ago
- Aggregate domain reconnaissance API — DNS, WHOIS/RDAP, SSL, subdomains, and email security in one parallel call. Live at https://oti-labs…☆15Oct 5, 2026Updated last month
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- ☆13Jan 26, 2026Updated 9 months ago
- Self-hosted threat intelligence platform — feed aggregation, AI triage, MITRE ATT&CK coverage, and Sentinel-integrated detection engineer…☆60Oct 15, 2026Updated 3 weeks ago
- Cross-platform interactive shell for Microsoft Defender for Endpoint Live Response☆16Jun 23, 2026Updated 4 months ago
- Yara rules for malicious javascript files from public repositories or written by me.☆13Nov 12, 2021Updated 4 years ago
- automatic enumeration and maintenance of Suricata monitoring interfaces☆12Dec 10, 2019Updated 6 years ago
- AI coding assistant skills for building CrowdStrike Falcon Fusion workflows: action discovery, YAML authoring, deployment, execution moni…☆29Updated this week
- open-source pentest management built to be operated by an AI agent☆30Sep 1, 2026Updated 2 months ago
- Local-LLM alert triage for self-hosted SOCs.☆15Updated this week
- A Public Package Scanner for The Community☆13Jan 14, 2026Updated 9 months ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Command-line tool to format and syntax highlight Suricata rules☆13Nov 30, 2019Updated 6 years ago
- Import and export custom Sysmon configurations using an interactive GUI that lets you build event rules, manage filters, and generate cle…☆31Mar 10, 2026Updated 8 months ago
- MAC Address brute forcing tool, used to bypass MAC based filtering☆16Feb 26, 2022Updated 4 years ago
- config and scripts from office0.mobilmir. Must not contain any secrets.☆13Oct 3, 2019Updated 7 years ago
- A set of scripts and analysis commands to harvest Tweets and identify content of interest, meaningful search criteria, and value keywords…☆23Oct 28, 2019Updated 7 years ago
- Azure function to insert MISP data in to Azure Sentinel☆34Oct 19, 2022Updated 4 years ago
- This is roles/user management system which is written using python-flask web framework, where different role of Admin, manager and users …☆12Nov 4, 2023Updated 3 years ago
- Public Data Set of AI Favicon WorkFlow Output☆16Jul 1, 2026Updated 4 months ago
- EntraTrace is a defensive security research tool for tracking and identifying the behavior of offensive tooling targeting Microsoft Entra…☆122Updated this week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- FrontHunter is a tool for testing large lists of domains to identify candidates for domain fronting.☆22May 5, 2025Updated last year
- Always-on, cross-platform telemetry daemon for AI agent activity. Sysmon for AI agents.☆63Jul 28, 2026Updated 3 months ago
- The goal of this project is to help researchers/investigaters to export the decrypted TLS content into a PCAP☆16Jul 20, 2026Updated 3 months ago
- Paperless-NGX backup script☆13Mar 28, 2025Updated last year
- ☆21Sep 11, 2026Updated last month
- A Model Context Protocol (MCP) server that integrates with the MISP (Malware Information Sharing Platform) to provide threat intelligence…☆13Apr 9, 2025Updated last year
- ☆15Aug 19, 2026Updated 2 months ago
- 🕵️♂️ | Terminal-Dorking, Fetches information through Google, SCADA-focused queries, Tor searches, and proxy-based reconnaissance all wi…☆13Mar 13, 2025Updated last year
- Automated Malware Behavior Analysis Tool☆12May 13, 2026Updated 5 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Interface LLMs from within MISP to extract TTPs and threat intel from CTI reports☆18Nov 13, 2023Updated 2 years ago
- A collection of my favourite workflows☆10Dec 31, 2024Updated last year
- Firepit - STIX Columnar Storage☆17Jun 5, 2024Updated 2 years ago
- Offline desktop workspace for organizing OSINT investigations.☆27Aug 6, 2026Updated 3 months ago
- Construct triage artifact based on rules☆20Updated this week
- Kibana 7 Templates for Suricata IDPS Threat Hunting☆45Apr 26, 2026Updated 6 months ago
- List of Awesome Vertex Synapse Resources☆30Aug 6, 2024Updated 2 years ago
Are these results useful?