Simple, effective, and modular package for parsing observables (indicators of compromise (IOCs), network data, and other, security related information) from text. It uses grammars rather than regexes which makes it more readable, maintainable, and hackable. Explore our interactive documentation here: https://hightower.space/ioc-finder/
☆184Oct 22, 2026Updated last week
Alternatives and similar repositories for ioc-finder
Users that are interested in ioc-finder are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Fang and defang indicators of compromise. You can test this project in a GUI here: http://ioc-fanger.hightower.space .☆68Oct 20, 2026Updated last week
- Defanged Indicator of Compromise (IOC) Extractor.☆584Aug 28, 2024Updated 2 years ago
- Extract and aggregate threat intelligence.☆933May 26, 2026Updated 5 months ago
- A tool to extract structured cyber information from incident reports.☆82Aug 30, 2018Updated 8 years ago
- Tool to extract indicators of compromise from security reports in PDF format☆439Feb 24, 2023Updated 3 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Extract indicators of compromise from text, including "escaped" ones.☆163Apr 19, 2020Updated 6 years ago
- Django web interface for managing Yara rules☆195Jul 28, 2018Updated 8 years ago
- ☆23Sep 28, 2022Updated 4 years ago
- Your Everyday Threat Intelligence☆2,040Updated this week
- Explore Indicators of Compromise Automatically☆96Feb 27, 2020Updated 6 years ago
- A collection of YARA rules we wish to share with the world, most probably referenced from http://blog.inquest.net.☆389May 11, 2022Updated 4 years ago
- An extendable tool to extract and aggregate IoCs from threat feeds☆33Feb 6, 2024Updated 2 years ago
- A python app to predict Att&ck tactics and techniques from cyber threat reports☆129Nov 15, 2023Updated 2 years ago
- An open source framework for enterprise level automated analysis.☆392Jun 27, 2022Updated 4 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- APTnotes data☆1,816Dec 16, 2024Updated last year
- CIF v3 -- the fastest way to consume threat intelligence☆189Apr 20, 2023Updated 3 years ago
- Graphics, icons, and diagrams to support STIX 2☆47Jun 2, 2021Updated 5 years ago
- Port of tomchop's autoruns plugin for Volatility 3☆10Apr 27, 2022Updated 4 years ago
- Automatic YARA rule generation for Malpedia☆170Sep 8, 2022Updated 4 years ago
- TTPDrill focuses on developing automated and context-aware analytics of cyber threat intelligence to accurately learn attack patterns (TT…☆27May 29, 2020Updated 6 years ago
- Threat Feed Aggregation, Made Easy☆169Jul 13, 2020Updated 6 years ago
- Indicator Extractor☆141Jul 14, 2018Updated 8 years ago
- YARA, SIGMA, SNORT Rules based on Malware Analysis☆17Apr 23, 2025Updated last year
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- All-in-one bundle of MISP, TheHive and Cortex☆168Sep 27, 2022Updated 4 years ago
- Indicators of Compromises (IOC) of our various investigations☆1,992Oct 22, 2026Updated last week
- Malware/IOC ingestion and processing engine☆110Nov 20, 2018Updated 7 years ago
- Parse YARA rules and operate over them more easily.☆195Feb 6, 2025Updated last year
- RENet is a deep learning tensorflow2.0 model for classify ATT&CK techniques and tactics for cyber threat intelligence with relevance enha…☆12Jan 11, 2023Updated 3 years ago
- Repository of YARA rules made by Trellix ATR Team☆631Mar 18, 2025Updated last year
- OASIS Cyber Threat Intelligence (CTI) TC: A tool for generating STIX content for prototyping and testing. https://github.com/oasis-open/c…☆44Apr 15, 2024Updated 2 years ago
- VBA analysis tools☆25Aug 15, 2025Updated last year
- Elemental - An ATT&CK Threat Library☆318Dec 8, 2022Updated 3 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Threat-Intel repository. API: https://github.com/davidonzo/apiosintDS☆166Oct 18, 2024Updated 2 years ago
- Hunting IOCs all day every day...☆89Sep 26, 2023Updated 3 years ago
- Cyber Threat Intelligence Repository expressed in STIX 2.0☆2,155Oct 13, 2026Updated 2 weeks ago
- Clusters and elements to attach to MISP events or attributes (like threat actors)☆649Updated this week
- ☆24Jul 7, 2023Updated 3 years ago
- Extensible Platform for Malware Analysis☆17Jan 14, 2021Updated 5 years ago
- A mapping of used malware names to commonly known family names☆65Feb 21, 2023Updated 3 years ago