Standard-Format Threat Intelligence Feeds
☆135Oct 9, 2026Updated this week
Alternatives and similar repositories for Public-Intelligence-Feeds
Users that are interested in Public-Intelligence-Feeds are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Zeek-Formatted Threat Intelligence Feeds☆404Updated this week
- Automatically created C2 Feeds☆745Updated this week
- ☆34Apr 29, 2026Updated 5 months ago
- Utilizing your Threat data from a MISP instance into CarbonBlack Response by exposing the data in the Threat Intelligence Feed.☆20May 25, 2022Updated 4 years ago
- This repository contains advanced threat hunting scripts for Cisco Secure Endpoint API. The scripts leverage the AMP API to hunt for thre…☆14Apr 21, 2026Updated 5 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- SACTI - Securely aggregate CTI sightings and report them on MISP☆14Oct 24, 2022Updated 3 years ago
- Active C2 IoCs☆100Nov 28, 2022Updated 3 years ago
- 🐟 PhishTank Blocklist for Pi-hole☆13Updated this week
- Indicators of Compromise (IOCs) accompanying HP Threat Research blog posts and reports.☆29Apr 10, 2024Updated 2 years ago
- A list of JARM hashes for different ssl implementations used by some C2/red team tools.☆144Apr 20, 2023Updated 3 years ago
- ☆44Dec 15, 2021Updated 4 years ago
- pyJARM is a library for doing JARM fingerprinting using python☆52Mar 23, 2025Updated last year
- A collection of Cortex Analyzers and Responders for TheHive/Cortex☆13Jan 29, 2020Updated 6 years ago
- A collection of tips for using MISP.☆77Dec 11, 2024Updated last year
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- ☆97Apr 8, 2026Updated 6 months ago
- Web interface to IntelMQ☆10Apr 28, 2026Updated 5 months ago
- Web-based IOC management platform with threat intelligence enrichment for SOC teams☆22Jun 20, 2026Updated 3 months ago
- The Enhanced MITRE ATT&CK® Coverage Tracker is an Excel tool for SOCs to measure and improve detection coverage of cyber threats. It simp…☆36Nov 13, 2025Updated 10 months ago
- Simple Script to Help You Find All Files Has Been Modified, Accessed, and Created In A Range Time.☆27Dec 1, 2022Updated 3 years ago
- Various blocklists☆16Updated this week
- Proofpoint - Emerging Threats - Threat Research tools + publicly shared intel and documentation☆89May 12, 2026Updated 4 months ago
- This repository is for Indicators of Compromise (IOCs) from Zscaler ThreatLabz public reports☆83Sep 28, 2026Updated last week
- Indicators of compromise☆19May 18, 2026Updated 4 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Machine-readable .txt IP blocklist from ThreatFox by Abuse.ch, updated every hour.☆57Updated this week
- This repository contains Open Source freely usable Threat Intel feeds that can be used without additional requirements. Contains multiple…☆957Updated this week
- This repository contains Malicious Indicator of Compromise (IOC) blocklist for MISP, firewall which is vital for cybersecurity profession…☆122Sep 17, 2025Updated last year
- Links to malware-related YARA rules☆15Sep 29, 2022Updated 4 years ago
- A commercial grade threat intelligence feed thats validated and updated every half hour.☆19Mar 24, 2023Updated 3 years ago
- Zeek network security monitor plugin that enables parsing of the Tabular Data Stream (TDS) protocol☆25May 30, 2024Updated 2 years ago
- Code and yara rules to detect and analyze Cobalt Strike☆274May 5, 2021Updated 5 years ago
- Threat-Intel repository. API: https://github.com/davidonzo/apiosintDS☆165Oct 18, 2024Updated last year
- A STIX 2.1 Extension Definition for the Course of Action (COA) object type. The nested property extension allows a COA to share machine-r…☆24Dec 11, 2023Updated 2 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Convert Sigma rules to SIEM queries, directly in your browser.☆123Aug 19, 2026Updated last month
- ☆10Dec 24, 2022Updated 3 years ago
- Automated threat intel feed parsing and consolidation💻👾🤖☆42Updated this week
- This python tools allows downloading of all submissions from a subreddit using Pushshift (API/Files) and the reddit API☆17Apr 6, 2021Updated 5 years ago
- IOC Collection 2022☆57Mar 7, 2023Updated 3 years ago
- Power-Forensics is the Best Friend for Incident Responders to perform IR and collect evidences for Linux based host☆12Jun 2, 2023Updated 3 years ago
- Repository of Yara rules created by the Stratosphere team☆29Jul 8, 2021Updated 5 years ago