Self-hosted threat intelligence platform — feed aggregation, AI triage, MITRE ATT&CK coverage, and Sentinel-integrated detection engineering. Runs standalone or fully Azure-integrated.
☆60Oct 15, 2026Updated 3 weeks ago
Alternatives and similar repositories for ThreatIntel-Aggregator
Users that are interested in ThreatIntel-Aggregator are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Autonomous 23-Source Zero-Cost OSINT, Binary Image Forensics (EXIF/GPS/Stego), Data Breach/Leak & Threat Intelligence Engine in Pure Pyth…☆28Oct 24, 2026Updated last week
- open-source pentest management built to be operated by an AI agent☆29Sep 1, 2026Updated 2 months ago
- Prevention-focused living-off-the-land testing framework mapped to MITRE ATT&CK.☆30Jul 24, 2026Updated 3 months ago
- WINFLESHER v2.0 - ATTACK SURFACE SECURITY FRAMEWORK☆26Sep 21, 2026Updated last month
- Python CLI tool for rapid IOC analysis (IPs, Domains, CVEs) using 6 free Threat Intel APIs. Outputs: Color-coded Excel, JSON, CSV. Uses: …☆27Oct 28, 2026Updated last week
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- DNSight - the comprehensive SDK and CLI tool for DNS, email and web security hygiene☆12Aug 9, 2026Updated 2 months ago
- MCP to help Defenders Detection Engineer Harder and Smarter☆18Jun 19, 2026Updated 4 months ago
- Sigma to Wazuh, Splunk and Sentinel from one source. Compiles 96% of SigmaHQ to Wazuh, refuses what it cannot translate faithfully, and s…☆14Oct 2, 2026Updated last month
- SOC Cockpit is a web-based operational command console for SOC (Security Operations Center) managers. It is designed around dense, shared…☆30Updated this week
- A self-hosted, real-time collaborative workspace for offensive security assessments.☆42Feb 20, 2026Updated 8 months ago
- cryptoptic☆19Sep 22, 2026Updated last month
- Detection engineering with durable memory, a five-stage lifecycle, and an agentic surface — the sibling of ATHF.☆37Oct 14, 2026Updated 3 weeks ago
- Open-source collaborative note-taking platform for cybersecurity and CTI teams. IOC auto-extraction, STIX 2.1 export, real-time ed…☆24Apr 6, 2026Updated 7 months ago
- DFIR forensics companion server + capture extension☆36Updated this week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Public Repository of Open Source Tools for Cyber Threat Intelligence Analysts and Researchers☆19Sep 24, 2026Updated last month
- ⚡ Rust-accelerated temporal graph engine for cybersecurity threat hunting. Ingests 100M+ edges from PCAP/CSV on a single machine. Sub-sec…☆15Jul 30, 2026Updated 3 months ago
- Windows host hardening auditor and remediation tool in PowerShell: CIS, DISA STIG, Essential Eight checks, reversible fixes, optional AI …☆21Oct 30, 2026Updated last week
- ☆21Sep 11, 2026Updated last month
- ☆37Oct 15, 2026Updated 3 weeks ago
- Kumo 蜘蛛 is a domain OSINT & security reconnaissance framework. Drop a domain, get everything back in real time across 29 parallel module…☆109Oct 25, 2026Updated last week
- Enumerate user accounts and registered authentication methods via the Microsoft Self-Service Password Reset (SSPR) portal☆60Sep 15, 2026Updated last month
- Optimal stopping package for LLM evaluations☆25Sep 13, 2026Updated last month
- Self-hosted multi-engine Sigma detection for event logs☆43Updated this week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Vulnerability Assessment Scanner with Report Generation☆13Oct 24, 2026Updated 2 weeks ago
- OpenShell is a lightweight, open-source reverse shell management server written in Go.☆26Mar 9, 2026Updated 7 months ago
- ☆29May 1, 2025Updated last year
- Threat hunting queries, Sigma rules, and detection engineering research based on MITRE ATT&CK techniques.☆75Oct 27, 2026Updated last week
- HoneyWire: The Open-Source, Unlimited Deception Platform. Turn any Linux machine into an enterprise-grade canary in 60 seconds.☆115Aug 28, 2026Updated 2 months ago
- A monthly Windows PE baseline dataset for Cyber security researchers☆24Oct 30, 2026Updated last week
- ☆22Jul 13, 2026Updated 3 months ago
- Nim-based encryption tool for obfuscating shellcode and payloads for evading Windows Defender.☆28Jul 14, 2026Updated 3 months ago
- Linux Persistence Detection, Hunting and Artifact Collection script☆30Updated this week
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Cross-platform incident response toolkit. 28 pre-built use cases in a single zero-install binary: triage, threat hunting, memory forensic…☆161Jul 28, 2026Updated 3 months ago
- 32 production-quality KQL detection rules for Microsoft Sentinel, mapped to MITRE ATT&CK for Cloud, credential access, lateral movement, …☆15Aug 1, 2026Updated 3 months ago
- Forensic Linux VM for Apple Silicon, ARM64 and x86-64 compatible platforms☆17Jul 17, 2026Updated 3 months ago
- Synapse Rapid Power-up for SinkDB☆11Jun 24, 2025Updated last year
- Ring -4 to Ring 0: offense-defense firmware research platform. We build the bootkits, then we catch them. Closed-loop. Zero trust in sili…☆15Oct 14, 2026Updated 3 weeks ago
- Tool to audit SAP Hana DB based on https://help.sap.com/docs/SAP_HANA_PLATFORM/742945a940f240f4a2a0e39f93d3e2d4/45955420940c4e80a1379bc72…☆13Nov 20, 2025Updated 11 months ago
- Windows forensics Engine☆117Updated this week