Alternatives and similar repositories for threat_intel:

Users that are interested in threat_intel are comparing it to the libraries listed below

• syphon1c / Threatelligence
  Threatelligence is a simple cyber threat intelligence feed collector, using Elasticsearch, Kibana and Python to automatically collect int…
  ☆147Updated 10 years ago
• csirtgadgets / bearded-avenger
  CIF v3 -- the fastest way to consume threat intelligence
  ☆183Updated last year
• QTek / QRadio
  QRadio ~ Best Threat Intelligence Radio ~ Tune In!
  ☆96Updated 8 years ago
• abhinavbom / Threat-Intelligence-Hunter
  TIH is an intelligence tool that helps you in searching for IOCs across multiple openly available security feeds and some well known APIs…
  ☆149Updated 9 months ago
• crits / crits_services
  CRITs Services Collection
  ☆183Updated 3 years ago
• aplura / Tango
  Honeypot Intelligence with Splunk
  ☆254Updated 6 years ago
• TheHive-Project / Hippocampe
  Threat Feed Aggregation, Made Easy
  ☆167Updated 4 years ago
• securityclippy / elasticintel
  Serverless, low cost, threat intel aggregation for enterprise or personal use, backed by ElasticSearch.
  ☆140Updated last year
• DefensePointSecurity / threat_note
  DPS' Lightweight Investigation Notebook
  ☆427Updated last year
• aboutsecurity / rastrea2r
  Collecting & Hunting for IOCs with gusto and style
  ☆116Updated 6 years ago
• opensourcesec / Forager
  Multithreaded threat Intelligence gathering built with Python3
  ☆173Updated 7 years ago
• mandiant / ioc_writer
  ☆202Updated last year
• stephenbrannon / IOCextractor
  IOC (Indicator of Compromise) Extractor: a program to help extract IOCs from text files.
  ☆135Updated 9 years ago
• CrowdStrike / cs-bro
  Bro scripts written by CrowdStrike Services
  ☆146Updated 3 years ago
• Tripwire / TARDIS
  Threat Analysis, Reconnaissance, and Data Intelligence System
  ☆125Updated 9 years ago
• CIRCL / url-abuse
  URL Abuse - A Versatile Software for URL review, analysis and black-list reporting
  ☆142Updated 2 years ago
• xme / misp-docker
  Docker container for MISP
  ☆96Updated 6 years ago
• ThreatHuntingProject / hunter
  A threat hunting / data analysis environment based on Python, Pandas, PySpark and Jupyter Notebook.
  ☆241Updated 3 years ago
• PUNCH-Cyber / stoq
  An open source framework for enterprise level automated analysis.
  ☆395Updated 2 years ago
• armbues / ioc_parser
  Tool to extract indicators of compromise from security reports in PDF format
  ☆433Updated 2 years ago
• csirtgadgets / massive-octo-spice
  DEPRECATED - USE v3 (bearded-avenger)
  ☆228Updated 7 years ago
• keithjjones / fileintel
  A modular Python application to pull intelligence about malicious files
  ☆119Updated 4 years ago
• SupportIntelligence / Icewater
  16,432 Free Yara rules created by
  ☆383Updated 5 years ago
• abusesa / abusehelper
  A framework for receiving and redistributing abuse feeds
  ☆123Updated 5 years ago
• Ptr32Void / OSTrICa
  ☆308Updated 7 years ago
• STIXProject / python-stix
  A Python library for parsing, manipulating, and generating STIX content.
  ☆243Updated 3 years ago
• mlsecproject / tiq-test
  Threat Intelligence Quotient Test - Dataviz and Statistical Analysis of TI feeds
  ☆173Updated 9 years ago
• sandialabs / scot
  Sandia Cyber Omni Tracker (SCOT)
  ☆246Updated 4 months ago
• PUNCH-Cyber / YaraGuardian
  Django web interface for managing Yara rules
  ☆190Updated 6 years ago
• MISP / misp-taxonomies
  Taxonomies used in MISP taxonomy system and can be used by other information sharing tool.
  ☆270Updated last week