Community driven repository of Playbooks and Apps for ThreatConnect.
☆75Jul 22, 2026Updated 3 months ago
Alternatives and similar repositories for threatconnect-playbooks
Users that are interested in threatconnect-playbooks are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Python scripts to download, parse, and enrich scans.io study data and load into Splunk for research, threat intelligence gathering, and s…☆20Oct 23, 2026Updated last week
- ThreatConnect Exchange App Framework☆26Updated this week
- Push-button Security Operations Center using Kubernetes☆13Oct 19, 2016Updated 10 years ago
- The Threat Actor Profile Guide for CTI Analysts☆121Jul 15, 2023Updated 3 years ago
- Python-based cloud node for local use☆11Mar 7, 2018Updated 8 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- This repository contains various threat hunting tools written in Python and is documented in the series Python Threat Hunting Tools which…☆22Nov 16, 2023Updated 2 years ago
- A flexible, easy to use, automation framework allowing users to integrate their capabilities and devices to cut through the repetitive, t…☆12Nov 23, 2022Updated 3 years ago
- AlienVault Open Threat Exchange App For Splunk☆10May 6, 2014Updated 12 years ago
- ☆16Feb 11, 2019Updated 7 years ago
- intelligence-icons is a collection of icons and diagrams for building training and marketing materials around Intelligence sharing; inclu…☆43Mar 17, 2019Updated 7 years ago
- Principles of MITRE ATT&CK in the fraud domain☆35Apr 14, 2019Updated 7 years ago
- Carving tool based in Radare2 & Yara☆17Oct 30, 2018Updated 8 years ago
- WebAMS is an Open Source web application for reporting and resolving incidents or tickets☆10Dec 11, 2022Updated 3 years ago
- Virus names generator☆28Feb 10, 2015Updated 11 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- ☆29Nov 10, 2016Updated 9 years ago
- Simple python wrapper for the Robtex API (see https://www.robtex.com/api/).☆13Apr 17, 2021Updated 5 years ago
- Yara rules written by me, for free use.☆20Nov 26, 2021Updated 4 years ago
- Sys Mon! Why yu nuh logging dat?☆13Dec 10, 2018Updated 7 years ago
- Collaborative Open Playbook Standard☆161Dec 29, 2025Updated 10 months ago
- IBM QRadar Ansible Collection☆26Oct 19, 2026Updated last week
- EXIF-based command and control PoC☆15Mar 20, 2020Updated 6 years ago
- Tool to extract indicators of compromise from security reports in PDF format☆75Jun 18, 2024Updated 2 years ago
- incident response scripts☆18Mar 4, 2019Updated 7 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- This repository hosts community contributed Kestrel huntflows (.hf) and huntbooks (.ipynb)☆37Jan 2, 2024Updated 2 years ago
- ☆55Mar 2, 2022Updated 4 years ago
- API Tools☆27Apr 18, 2016Updated 10 years ago
- Data package with attacks against civil society☆14Jun 7, 2016Updated 10 years ago
- Sample SecOps scripts and Utilities☆12Jun 19, 2024Updated 2 years ago
- Phantom Community Playbooks☆560Sep 21, 2026Updated last month
- Virtual machines that are set up with a variety of known vulnerabilities.☆17Mar 1, 2022Updated 4 years ago
- The FASTEST way to consume threat intel.☆69May 10, 2023Updated 3 years ago
- ☆23Jul 7, 2020Updated 6 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Alienvault OTX Bro IDS Connector☆82Sep 7, 2015Updated 11 years ago
- Simple, effective, and modular package for parsing observables (indicators of compromise (IOCs), network data, and other, security relate…☆184Updated this week
- Security Operations Center Multiple Purpose Tool, takes IP address input, conducts OSINT, conducts splunk, bro, fireeye, imperva, and fir…☆23Jun 6, 2017Updated 9 years ago
- Transforms for the AlienVault OTX service☆39Nov 3, 2016Updated 9 years ago
- A curated Cyber "Security Orchestration, Automation and Response (SOAR)" awesome list.☆1,006Aug 26, 2024Updated 2 years ago
- CTI database generator and public dataset☆22Jan 12, 2020Updated 6 years ago
- Old home of LimaCharlie, open source EDR☆32Aug 2, 2026Updated 2 months ago