Alternatives and similar repositories for CTI:

Users that are interested in CTI are comparing it to the libraries listed below

• NUKIB / misp
  Docker image for MISP
  ☆125Updated last month
• MISP / misp-docker
  A production ready Dockered MISP
  ☆228Updated this week
• GossiTheDog / Monitoring
  ☆43Updated 3 months ago
• MISP / misp-playbooks
  MISP Playbooks
  ☆198Updated 2 months ago
• sublime-security / sublime-platform
  A free and open platform for detecting and preventing email attacks like BEC, malware, and credential phishing. Gain visibility and contr…
  ☆204Updated this week
• Cisco-Talos / IOCs
  Indicators of Compromise
  ☆192Updated this week
• cudeso / misp2sentinel
  MISP to Sentinel integration
  ☆64Updated 2 weeks ago
• JMousqueton / ransomware.live
  🏴‍☠️💰 Another Ransomware gang tracker
  ☆192Updated 3 weeks ago
• docintelapp / DocIntel
  Open Source Platform for storing, organizing, and searching documents related to cyber threats
  ☆164Updated last year
• center-for-threat-informed-defense / cti-blueprints
  CTI Blueprints is a free suite of templates and tools that helps Cyber Threat Intelligence analysts create high-quality, actionable repor…
  ☆239Updated last month
• THORCollective / HEARTH
  A community-driven repository for threat hunting ideas, methodologies, and research that serves as a central gathering place for hunters …
  ☆236Updated last month
• The-DFIR-Report / Sigma-Rules
  Rules generated from our investigations.
  ☆194Updated last month
• PaloAltoNetworks / Unit42-timely-threat-intel
  A collection of files with indicators supporting social media posts from Palo Alto Network's Unit 42 team to disseminate timely threat in…
  ☆294Updated this week
• weslambert / velociraptor-docker
  Docker image for Velocidex Velociraptor
  ☆125Updated last month
• joshlemon / DFIR-Reference-Frameworks
  Repository of public reference frameworks for the DFIR community.
  ☆116Updated last year
• SigmaHQ / sigma-cli
  The Sigma command line interface based on pySigma
  ☆152Updated last week
• ail-project / lacus
  Lacus is a capturing system using playwright, as a web service.
  ☆64Updated this week
• SigmaHQ / pySigma-backend-elasticsearch
  pySigma Elasticsearch backend
  ☆53Updated this week
• keyboardcrunch / sentinelone-queries
  Repository of SentinelOne Deep Visibility queries.
  ☆127Updated 3 years ago
• ThreatLabz / iocs
  This repository is for Indicators of Compromise (IOCs) from Zscaler ThreatLabz public reports
  ☆72Updated 5 months ago
• siriussecurity / dettectinator
  Dettectinator - The Python library to your DeTT&CT YAML files.
  ☆111Updated 2 weeks ago
• magicsword-io / LOLRMM
  LotL RMM
  ☆171Updated last month
• BushidoUK / CTI-Analyst-Challenge
  An analytical challenge created to test junior analysts looking to try performing proactive and reactive cyber threat intelligence.
  ☆196Updated 9 months ago
• redhat-infosec / priority-intelligence-requirements-dev
  This guide describes a process for developing Cyber Threat Intelligence Priority Intelligence Requirements
  ☆120Updated last year
• madirish / ossocdocs
  Open Source Security Operations Center Documentation
  ☆176Updated this week
• CriticalPathSecurity / Zeek-Intelligence-Feeds
  Zeek-Formatted Threat Intelligence Feeds
  ☆359Updated this week
• ControlCompass / ControlCompass.github.io
  Pointing cybersecurity teams to thousands of detection rules and offensive security tests aligned with common attacker techniques
  ☆132Updated last year
• SEKOIA-IO / Community
  Welcome to the SEKOIA.IO Community repository!
  ☆149Updated last week
• CERN-CERT / pDNSSOC
  Leveraging MISP indicators via a pDNS-based infrastructure as a poor man’s SOC.
  ☆51Updated 3 months ago
• blueteam0ps / AllthingsTimesketch
  This repository contains helper scripts and custom configs to get the best out of Google's Timesketch project.
  ☆109Updated last year