Alternatives and similar repositories for threat-research

Users that are interested in threat-research are comparing it to the libraries listed below

• davidonzo / Threat-Intel
  Threat-Intel repository. API: https://github.com/davidonzo/apiosintDS
  ☆162Updated last year
• openphish / pyopdb
  ☆76Updated 4 years ago
• hatching / triage
  Hatching Triage public command-line utility and API library.
  ☆74Updated 2 years ago
• FIRSTdotorg / global-irt
  Global IRT (Incident Response Team) is a project to describe common IRT and abuse contact information
  ☆76Updated last year
• intelowlproject / GreedyBear
  Threat Intel Platform for T-POTs
  ☆159Updated this week
• InQuest / yara-rules-vt
  Collection of YARA rules designed for usage through VirusTotal.com.
  ☆79Updated last year
• FIRSTdotorg / Vuln4Cast
  A collection of data fetchers, and simple quarterly and yearly CVE forecasting models.
  ☆44Updated 2 months ago
• intelowlproject / pyintelowl
  Robust Python SDK and Command Line Client for interacting with IntelOwl's API.
  ☆69Updated 8 months ago
• VirusTotal / vt-augment
  The VT Augment widget is an official, compliant and recommended way of integrating VirusTotal data in third-party applications.
  ☆37Updated last year
• SEKOIA-IO / Community
  Welcome to the SEKOIA.IO Community repository!
  ☆171Updated this week
• MISP / misp-training-lea
  Practical Information Sharing between Law Enforcement and CSIRT communities using MISP
  ☆35Updated 2 years ago
• blacklotuslabs / IOCs
  IOCs published by Black Lotus Labs
  ☆124Updated last month
• cablej / ransomwhere
  The open ransomware payment tracker
  ☆101Updated 3 months ago
• CybercentreCanada / assemblyline-base
  Base components for Assemblyline 4 (Datastore, ODM, Filestore, Remote Datatypes, utils function, etc...)
  ☆71Updated last week
• alexandrosmagos / dyn-dns-list
  This repository contains a comprehensive list of over 30k dynamic DNS domains as of 2024. The list is provided for informational purposes…
  ☆110Updated last week
• malpedia / feedback
  Public Issue tracker to gather feedback for and allow discussions around Malpedia
  ☆36Updated 3 years ago
• ninoseki / abuse_whois
  Yet another way to find where to report an abuse
  ☆30Updated 10 months ago
• oasis-open / cti-stix-validator
  OASIS TC Open Repository: Validator for STIX 2.0 JSON normative requirements and best practices
  ☆59Updated 4 months ago
• MISP / misp-stix
  MISP-STIX-Converter - Python library to handle the conversion between MISP and STIX formats
  ☆56Updated this week
• typosquatter / ail-typo-squatting
  Generate list of potential typo squatting domains with domain name permutation engine to feed AIL and other systems.
  ☆100Updated 7 months ago
• SigmaHQ / Detection-Rule-License
  Detection Rule License (DRL)
  ☆21Updated 11 months ago
• hashlookup / hashlookup-forensic-analyser
  Analyse a forensic target (such as a directory) to find and report files found and not found from CIRCL hashlookup public service - https…
  ☆127Updated 2 years ago
• center-for-threat-informed-defense / attack-workbench-rest-api
  An application allowing users to explore, create, annotate, and share extensions of the MITRE ATT&CK® knowledge base. This repository con…
  ☆50Updated last week
• telekom-security / malware_analysis
  This repository contains analysis scripts, YARA rules, and additional IoCs related to our Telekom Security blog posts.
  ☆119Updated last year
• phish-report / IOK
  IOK (Indicator Of Kit) is an open source language and ruleset for detecting phishing threat actor tools and tactics
  ☆190Updated 7 months ago
• CYBERCOM-Malware-Alert / IOCs
  ☆19Updated 3 years ago
• JPMinty / Detection_Engineering_Signatures
  YARA, SIGMA, SNORT Rules based on Malware Analysis
  ☆16Updated 7 months ago
• mvt-project / mvt-indicators
  Index and collection of MVT compatibile indicators of compromise.
  ☆111Updated 4 months ago
• Phishing-Database / phishing
  The central repository for adding or removing domains, links, and IPs from the Phishing.Database project.
  ☆74Updated last week
• OpenCTI-Platform / client-python
  OpenCTI Python Client
  ☆144Updated 3 weeks ago