Cisco-Talos / IOCsLinks
Indicators of Compromise
☆229Updated last week
Alternatives and similar repositories for IOCs
Users that are interested in IOCs are comparing it to the libraries listed below
Sorting:
- Welcome to the SEKOIA.IO Community repository!☆166Updated last week
- Rules generated from our investigations.☆202Updated 4 months ago
- Automated YARA Rule Standardization and Quality Assurance Tool☆254Updated last week
- A collection of files with indicators supporting social media posts from Palo Alto Network's Unit 42 team to disseminate timely threat in…☆402Updated this week
- SentinelOne STAR Rules☆69Updated 9 months ago
- An IDE and translation engine for detection engineers and threat hunters. Be faster, write smarter, keep 100% privacy.☆165Updated last month
- Harness the power of Splunk for your investigations☆140Updated last month
- MISP Playbooks☆219Updated last month
- Sigma rule specification☆155Updated 2 weeks ago
- A community-driven repository for threat hunting ideas, methodologies, and research that serves as a central gathering place for hunters …☆284Updated this week
- Signatures and IoCs from public Volexity blog posts.☆359Updated last month
- The Sigma command line interface based on pySigma☆165Updated this week
- A repository of my own Sigma detection rules.☆162Updated last year
- Docker image for Velocidex Velociraptor☆139Updated 8 months ago
- Threat Hunting queries for various attacks☆241Updated this week
- Curated Windows event log Sigma rules used in Hayabusa and Velociraptor.☆209Updated this week
- An opensource sigma conversion tool built using pysigma☆145Updated last month
- Fast IOC and YARA Scanner☆84Updated 5 years ago
- ☆147Updated 3 weeks ago
- CTI Blueprints is a free suite of templates and tools that helps Cyber Threat Intelligence analysts create high-quality, actionable repor…☆270Updated 7 months ago
- Standard-Format Threat Intelligence Feeds☆124Updated this week
- 🏴☠️💰 Another Ransomware gang tracker☆266Updated 2 months ago
- Zeek-Formatted Threat Intelligence Feeds☆378Updated last week
- Repository of attack and defensive information for Business Email Compromise investigations☆268Updated 6 months ago
- ☆75Updated last month
- pySigma Elasticsearch backend☆54Updated last month
- Roota is a public-domain language of threat detection and response that combines native queries from a SIEM, EDR, XDR, or Data Lake with …☆132Updated last year
- Convert a variety of log formats to CSV while enriching detected IPs with Geolocation, ASN, DNS, WhoIs, Shodan InternetDB and Threat Indi…☆108Updated last year
- This repository is for Indicators of Compromise (IOCs) from Zscaler ThreatLabz public reports☆75Updated 3 months ago
- Pointing cybersecurity teams to thousands of detection rules and offensive security tests aligned with common attacker techniques☆139Updated last year