ciscocsirt / PW3QueryLinks
PW3Query is a serverless query agent and repository for PublicWWW with a focus on proactively generating threat intelligence related to web compromises.
☆20Updated 6 years ago
Alternatives and similar repositories for PW3Query
Users that are interested in PW3Query are comparing it to the libraries listed below
Sorting:
- Multithreaded threat Intelligence gathering built with Python3☆179Updated 8 years ago
- misp-cloud - Cloud-ready images of MISP☆74Updated 3 years ago
- automate your MISP installs☆68Updated 5 years ago
- Your Everyday Threat Intelligence☆22Updated 8 years ago
- Recon Hunt Queries☆79Updated 4 years ago
- Miscelaneous Dockers☆47Updated 4 years ago
- Hunting IOCs all day every day...☆87Updated 2 years ago
- Security Monitoring Resolution Categories☆138Updated 4 years ago
- Slides and Other Resources from my latest Talks and Presentations☆24Updated 4 months ago
- PROJECT PAUSED 1/11/22, Tracking Threat Actor Emails in Phishing Kits. CC @PhishKitTracker on twitter if you find a #threatactoremail in …☆102Updated 4 years ago
- A Splunk app to use MISP in background☆113Updated last month
- A collection of typical false positive indicators☆56Updated 5 years ago
- CrowdStrike Threat Intelligence☆35Updated 3 years ago
- Monitoring tool for PasteBin-alike sites written in Python. Inspired by pastemon http://github.com/xme/pastemon☆44Updated 5 years ago
- Expert Investigation Guides☆51Updated 4 years ago
- This repository is created to add value to existing Network Security Monitoring solutions.☆42Updated 9 years ago
- Yara-Endpoint is a tool useful for incident response as well as anti-malware enpoint base on Yara signatures.☆109Updated 7 years ago
- URL Abuse - A Versatile Software for URL review, analysis and black-list reporting☆148Updated 3 years ago
- Synapse: a Meta Alert Feeder for TheHive, a Security Incident Response Platform☆71Updated 2 years ago
- Imports Alienvault OTX pulses to a MISP instance☆53Updated 4 years ago
- Repository of scripts/tools that may be useful in Security Operations Centres (SOC)☆55Updated 5 years ago
- Sigma Detection Rule Repository☆92Updated 5 years ago
- All the IOC's I have gathered which are used directly involved coronavirus / covid-19 / SARS-CoV-2 cyber attack campaigns☆65Updated 4 years ago
- ☆39Updated 6 years ago
- A toolkit for Security Researchers☆127Updated 6 years ago
- Dovehawk is a Zeek module that automatically imports MISP indicators and reports Sightings☆122Updated 4 years ago
- Tools to automate and/or expedite response.☆116Updated last year
- Open platform for modelling, collection and exchange of knowledge☆164Updated 9 months ago
- InvestigationPlaybookSpec☆71Updated 8 years ago
- Scripts for accessing and transforming cyber threat intelligence☆26Updated 10 years ago