Alternatives and similar repositories for Unit42-timely-threat-intel

Users that are interested in Unit42-timely-threat-intel are comparing it to the libraries listed below

• mthcht / ThreatHunting-Keywords
  Awesome list of keywords and artifacts for Threat Hunting sessions
  ☆615Updated 3 months ago
• THORCollective / HEARTH
  A community-driven repository for threat hunting ideas, methodologies, and research that serves as a central gathering place for hunters …
  ☆284Updated this week
• center-for-threat-informed-defense / cti-blueprints
  CTI Blueprints is a free suite of templates and tools that helps Cyber Threat Intelligence analysts create high-quality, actionable repor…
  ☆270Updated 7 months ago
• BushidoUK / CTI-Analyst-Challenge
  An analytical challenge created to test junior analysts looking to try performing proactive and reactive cyber threat intelligence.
  ☆199Updated last year
• cert-orangecyberdefense / ransomware_map
  Map tracking ransomware, by OCD World Watch team
  ☆479Updated 8 months ago
• SecurityAura / DE-TH-Aura
  Repository where I hold random detection and threat hunting queries that I come up with based on different sources of information (or eve…
  ☆268Updated 2 weeks ago
• cyb3rmik3 / MDE-DFIR-Resources
  A curated list of resources for DFIR through Microsoft Defender for Endpoint leveraging kusto queries, powershell scripts, tools such as …
  ☆412Updated 3 months ago
• MISP / misp-playbooks
  MISP Playbooks
  ☆219Updated last month
• mdecrevoisier / SIGMA-detection-rules
  Set of SIGMA rules (>350) mapped to MITRE ATT&CK tactic and techniques
  ☆396Updated last week
• magicsword-io / LOLRMM
  LotL RMM
  ☆256Updated 2 weeks ago
• madirish / ossocdocs
  Open Source Security Operations Center Documentation
  ☆201Updated 4 months ago
• JMousqueton / ransomware.live
  🏴‍☠️💰 Another Ransomware gang tracker
  ☆266Updated 2 months ago
• Yamato-Security / EnableWindowsLogSettings
  Documentation and scripts to properly enable Windows event logs.
  ☆642Updated last month
• Bert-JanP / Open-Source-Threat-Intel-Feeds
  This repository contains Open Source freely usable Threat Intel feeds that can be used without additional requirements. Contains multiple…
  ☆722Updated 9 months ago
• The-DFIR-Report / Sigma-Rules
  Rules generated from our investigations.
  ☆202Updated 5 months ago
• Cisco-Talos / IOCs
  Indicators of Compromise
  ☆229Updated 2 weeks ago
• volexity / threat-intel
  Signatures and IoCs from public Volexity blog posts.
  ☆359Updated last month
• dfir-dd / dfir-toolkit
  CLI tools for forensic investigation of Windows artifacts
  ☆347Updated 3 months ago
• Yamato-Security / hayabusa-rules
  Curated Windows event log Sigma rules used in Hayabusa and Velociraptor.
  ☆209Updated last week
• curated-intel / Attribution-to-IP
  A collection of methods to learn who the owner of an IP address is.
  ☆176Updated last month
• mf1d3l / Splunk4DFIR
  Harness the power of Splunk for your investigations
  ☆140Updated last month
• executemalware / Malware-IOCs
  ☆513Updated last year
• YARAHQ / yara-forge
  Automated YARA Rule Standardization and Quality Assurance Tool
  ☆257Updated this week
• mitre / caldera-ot
  MITRE Caldera™ for OT Plugins & Capabilities
  ☆230Updated this week
• MISP / misp-docker
  A production ready Dockered MISP
  ☆290Updated this week
• SigmaHQ / sigma-specification
  Sigma rule specification
  ☆155Updated 2 weeks ago
• Psmths / windows-forensic-artifacts
  Handbook of windows forensic artifacts across multiple Windows version with interpretation tips and some examples. Work in progress!
  ☆405Updated last year
• mdecrevoisier / EVTX-to-MITRE-Attack
  Set of EVTX samples (>270) mapped to MITRE ATT&CK tactic and techniques to measure your SIEM coverage or developed new use cases.
  ☆596Updated 10 months ago
• The-DFIR-Report / DFIR-Artifacts
  Repository for sharing examples of our artifacts data and for use in new analyst recruitment.
  ☆108Updated 6 months ago
• SEKOIA-IO / Community
  Welcome to the SEKOIA.IO Community repository!
  ☆166Updated last week