MISP / MISP-maltego
Set of Maltego transforms to inferface with a MISP Threat Sharing instance, and also to explore the whole MITRE ATT&CK dataset.
☆166Updated 2 months ago
Related projects: ⓘ
- Open platform for modelling, collection and exchange of knowledge☆154Updated 6 months ago
- ☆139Updated this week
- Multithreaded threat Intelligence gathering built with Python3☆168Updated 6 years ago
- A threat hunting / data analysis environment based on Python, Pandas, PySpark and Jupyter Notebook.☆234Updated 3 years ago
- Gather Open-Source Intelligence using PowerShell.☆166Updated 4 years ago
- Threat Feed Aggregation, Made Easy☆166Updated 4 years ago
- Collecting & Hunting for IOCs with gusto and style☆235Updated 3 years ago
- A toolkit for Security Researchers☆124Updated 5 years ago
- A live dashboard for a real-time overview of threat intelligence from MISP instances☆192Updated last year
- Tools to automate and/or expedite response.☆113Updated 2 months ago
- Repository of scripts/tools that may be useful in Security Operations Centres (SOC)☆54Updated 3 years ago
- ☆167Updated 2 months ago
- Imports Alienvault OTX pulses to a MISP instance☆52Updated 2 years ago
- All the IOC's I have gathered which are used directly involved coronavirus / covid-19 / SARS-CoV-2 cyber attack campaigns☆65Updated 3 years ago
- A Splunk app to use MISP in background☆109Updated 8 months ago
- Tools for the Computer Incident Response Team☆141Updated 7 years ago
- Python3 library and command line for GreyNoise☆149Updated this week
- Knowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)☆94Updated 3 months ago
- Automated Docker MISP container - Malware Information Sharing Platform and Threat Sharing☆104Updated 8 months ago
- Cyber Threat Intelligence - Toolbox☆50Updated 5 years ago
- PROJECT PAUSED 1/11/22, Tracking Threat Actor Emails in Phishing Kits. CC @PhishKitTracker on twitter if you find a #threatactoremail in …☆98Updated 2 years ago
- Assimilate is a series of scripts for using the Naïve Bayes algorithm to find potential malicious activity in HTTP headers☆90Updated 6 years ago
- Dump of organized knowledge on DFIR☆132Updated 2 years ago
- Tool to extract indicators of compromise from security reports in PDF format☆72Updated 3 months ago
- Threat-Intelligence Feeds & Tools & Frameworks☆211Updated 3 months ago
- Synapse: a Meta Alert Feeder for TheHive, a Security Incident Response Platform☆71Updated last year
- TIH is an intelligence tool that helps you in searching for IOCs across multiple openly available security feeds and some well known APIs…☆148Updated 3 months ago
- Hunting IOCs all day every day...☆79Updated 11 months ago
- Yara-Endpoint is a tool useful for incident response as well as anti-malware enpoint base on Yara signatures.☆102Updated 6 years ago
- A collection of notebooks built for defensive and offensive operations.☆76Updated 3 years ago