BlackBerry Threat Research & Intelligence
☆100Oct 20, 2023Updated 3 years ago
Alternatives and similar repositories for threat-research-and-intelligence
Users that are interested in threat-research-and-intelligence are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- The Intelligent Process Lifecycle of Active Cyber Defenders☆34Jan 1, 2023Updated 3 years ago
- A collection of tips for using MISP.☆77Dec 11, 2024Updated last year
- Python library to query various sources of threat intelligence for data on domains, file hashes, and IP addresses.☆31May 15, 2026Updated 5 months ago
- A Dumb Windows App With A Sweet Theme Song for Inspecting Bad Clipboard Content☆12Apr 25, 2025Updated last year
- Scripts and tools accompanying HP Threat Research blog posts and reports.☆50Apr 10, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Resources for SANS CTI Summit 2021 presentation☆104Nov 8, 2023Updated 2 years ago
- The Threat Hunting In Rapid Iterations (THIRI) Jupyter notebook is designed as a research aide to let you rapidly prototype threat huntin…☆154Apr 25, 2022Updated 4 years ago
- CTI Blueprints is a free suite of templates and tools that helps Cyber Threat Intelligence analysts create high-quality, actionable repor…☆304Mar 20, 2025Updated last year
- Script to interface MISP with Facebook ThreatExchange☆13Nov 30, 2017Updated 8 years ago
- Best practices in threat intelligence☆49Nov 6, 2022Updated 4 years ago
- Passive DNS server interface compliant to "Common Output Format"☆10Sep 19, 2016Updated 10 years ago
- A repository of my own Sigma detection rules.☆167Nov 25, 2025Updated 11 months ago
- Signatures and IoCs from public Volexity blog posts.☆374Oct 13, 2026Updated 3 weeks ago
- Scripts, Yara rules and other files developed during malware investigations☆28Aug 19, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Import CrowdStrike Threat Intelligence into your instance of MISP☆59Oct 26, 2026Updated last week
- Pythonic way to work with the warning lists defined there: https://github.com/MISP/misp-warninglists☆36Oct 25, 2026Updated last week
- Simple yara rule manager☆67Dec 27, 2022Updated 3 years ago
- A tool for studying JavaScript malware.☆15Updated this week
- Repository of tools, YARA rules, and code-snippets from Stairwell's research team.☆24Jan 31, 2024Updated 2 years ago
- Python wrappers for mal_unpack☆37Sep 19, 2023Updated 3 years ago
- MISP sighting server is a fast sighting server to store and look-up sightings on attributes (network indicators, file hashes, system indi…☆15Dec 24, 2023Updated 2 years ago
- Minimal Indicator Storage System☆12Feb 8, 2021Updated 5 years ago
- Threat Box Assessment Tool☆19Mar 5, 2026Updated 8 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Utilities for working with vivisect☆26Sep 23, 2026Updated last month
- Generate list of potential typo squatting domains with domain name permutation engine to feed AIL and other systems.☆109Apr 30, 2025Updated last year
- This repository contains analysis scripts, YARA rules, and additional IoCs related to our Telekom Security blog posts.☆121Mar 4, 2026Updated 8 months ago
- ETW-Almulahaza is a consumer python-based tool that help you monitor ETW events of the operating system☆13Jun 24, 2022Updated 4 years ago
- ☆22Jun 2, 2023Updated 3 years ago
- SACTI - Securely aggregate CTI sightings and report them on MISP☆14Oct 24, 2022Updated 4 years ago
- ☆13Jan 26, 2026Updated 9 months ago
- Sigma rules to share with the community☆126Jan 29, 2025Updated last year
- Analysis of malware and Cyber Threat Intel of APT and cybercriminals groups☆728Dec 26, 2022Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆45Jul 11, 2025Updated last year
- List of Awesome Vertex Synapse Resources☆30Aug 6, 2024Updated 2 years ago
- Sample staging & detonation utility to be used in combination with Cuckoo Sandbox.☆13Oct 26, 2026Updated last week
- R-CSIRT Linux Triage tool☆39Jun 28, 2018Updated 8 years ago
- A web scraper to create MISP events and reports☆21Updated this week
- Create dataset for suricata with indicators of MISP instances and add sightings in MISP if an indicator of dataset generates an alert☆37Nov 9, 2022Updated 3 years ago
- Post-Exploitation EVTX Analyzer for BloodHound Mapping☆15May 8, 2026Updated 5 months ago