Repository created to share information about tactics, techniques and procedures used by threat actors. Initially with ransomware groups and evolving to other types of threats.
☆419Jan 29, 2026Updated 9 months ago
Alternatives and similar repositories for ThreatActors-TTPs
Users that are interested in ThreatActors-TTPs are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A collection of CVEs weaponized by ransomware operators☆156Aug 30, 2026Updated 2 months ago
- A resource containing all the tools each ransomware gangs uses☆1,461Aug 29, 2026Updated 2 months ago
- An Archive of Ransomware Notes Past and Present Collected by Zscaler ThreatLabz☆426Aug 13, 2026Updated 2 months ago
- IOCs collected during day-to-day activities☆153Updated this week
- Yet another Ransomware gang tracker☆682Updated this week
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Collection of Cyber Threat Intelligence sources from the deep and dark web☆7,442Updated this week
- Live Feed of C2 servers, tools, and botnets☆784Apr 13, 2026Updated 6 months ago
- Interesting APT Report Collection And Some Special IOCs☆3,108Updated this week
- A repository to help CTI teams tackle the challenges around collection and research by providing guidance from experienced practitioners☆123Oct 29, 2024Updated 2 years ago
- Telegram Monitor☆376Jun 10, 2025Updated last year
- Automatically created C2 Feeds☆749Updated this week
- A collection of phishing samples for researchers and detection developers.☆481Updated this week
- Extract C2 Traffic☆256Nov 25, 2024Updated last year
- Repository for threat hunting and detection queries, etc. for Defender for Endpoint and Microsoft Sentinel in KQL(Kusto Query Language).☆831Oct 21, 2026Updated last week
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- This repository contains Open Source freely usable Threat Intel feeds that can be used without additional requirements. Contains multiple…☆969Updated this week
- This repository contains detailed adversary simulation APT campaigns targeting various critical sectors. Each simulation includes custom …☆1,158Updated this week
- the transparent ransomware claim tracker 🥷🏼🧅🖥️☆1,117Mar 3, 2026Updated 7 months ago
- A collection of companies that disclose adversary TTPs after they have been breached☆306Sep 20, 2026Updated last month
- Awesome list of keywords and artifacts for Threat Hunting sessions☆682Aug 4, 2025Updated last year
- Awesome Security lists for SOC/CERT/CTI☆1,955Updated this week
- MasterParser is a powerful DFIR tool designed for analyzing and parsing Linux logs☆767Feb 1, 2026Updated 9 months ago
- A curated list of Awesome Threat Intelligence Blogs☆566Jun 12, 2026Updated 4 months ago
- A collection of papers, blogs, and resources that make up the quintessential aspects of cyber threat intelligence☆737Apr 25, 2026Updated 6 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, M…☆4,134Sep 22, 2026Updated last month
- TL;DR: Mutate a binary to identify potential exploit candidates☆11Jan 12, 2026Updated 9 months ago
- IoCs and YARA rules from Threatray's Threat Research☆23Oct 20, 2026Updated last week
- Collection of OPSEC Tradecraft and TTPs for Red Team Operations☆340Oct 17, 2026Updated 2 weeks ago
- Capture screenshots of onion services on an onion service.☆73Jun 11, 2024Updated 2 years ago
- BEAR-C2 is an adversary simulation and emulation framework built around real-world TTPs inspired by Russian, Chinese, North Korean, and I…☆712Updated this week
- yara detection rules for hunting with the threathunting-keywords project☆171May 11, 2025Updated last year
- Indicators of compromise☆19May 18, 2026Updated 5 months ago
- A proof-of-concept C2 channel through DuckDuckGo's image proxy service☆79Nov 12, 2023Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- OpenCTI.BR ThreatFeeds Public Repository☆126Updated this week
- A graphical automation to monitor if backdoors/default settings are still active on the compromised machines over time.☆45Mar 8, 2024Updated 2 years ago
- With Wireshark or TCPdump, you can determine whether there is harmful activity on your network traffic that you have recorded on the netw…☆148May 31, 2024Updated 2 years ago
- Map tracking ransomware, by OCD World Watch team☆495Feb 20, 2026Updated 8 months ago
- ☆16May 3, 2024Updated 2 years ago
- Encoder PHP webshell to bypass WAF using XOR operations.☆56Aug 2, 2023Updated 3 years ago
- Guía completa para configurar y utilizar servicios financieros NO-KYC. Este repositorio cubre herramientas de finanzas digitales anónimas…☆17Aug 7, 2024Updated 2 years ago