This repository contains supplemental items including IOCs, and signatures discussed in Huntress blogposts, and other media.
☆68Oct 20, 2026Updated last week
Alternatives and similar repositories for threat-intel
Users that are interested in threat-intel are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆16Mar 22, 2023Updated 3 years ago
- ☆14Feb 10, 2021Updated 5 years ago
- Indicators of compromise from to analysis and research by Nextron Threat Research team☆23Oct 21, 2026Updated last week
- Detection engineering with durable memory, a five-stage lifecycle, and an agentic surface — the sibling of ATHF.☆33Oct 14, 2026Updated 2 weeks ago
- ☆15Nov 25, 2021Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- IOCs for World Watch investigations☆14Sep 25, 2026Updated last month
- Yara Rules for Modern Malware☆81Mar 3, 2024Updated 2 years ago
- A repository hosting example goodware evtx logs containing sample software installation and basic user interaction☆93Sep 14, 2026Updated last month
- ☆11Jun 12, 2023Updated 3 years ago
- Public Chronicle Detection Rules☆12Apr 25, 2023Updated 3 years ago
- Knowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)☆104Aug 12, 2026Updated 2 months ago
- A collection of various SIEM rules relating to malware family groups.☆72Jun 18, 2024Updated 2 years ago
- Synapse Rapid Power-up for SinkDB☆11Jun 24, 2025Updated last year
- Winterfell hunt is a python script to perform auto threat hunting for malicious activities in windows OS based on collected data by winte…☆15Jul 23, 2020Updated 6 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Bulk indicator VirusTotal lookups supporting file hashes, domains and IPs.☆13May 28, 2025Updated last year
- ☆45Jul 11, 2025Updated last year
- LotL RMM☆410Updated this week
- Run Sigma detection rules on logs from the new MacOS EndpointSecurity Framework☆22Jan 22, 2021Updated 5 years ago
- Indicators of Normality☆11Jul 22, 2022Updated 4 years ago
- Everything related to YARA☆16Apr 18, 2026Updated 6 months ago
- Get started using Synapse Open-Source to start a Cortex and perform analysis within your area of expertise.☆52May 16, 2022Updated 4 years ago
- Microsoft Sentinel SIEM Log Source Analyzer☆31Updated this week
- Cloud Detection & Response GOAT is a scenario-driven, intentionally vulnerable framework designed to help defenders validate detection pi…☆21Oct 7, 2026Updated 3 weeks ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- OpenIOC rules to facilitate hunting for indicators of compromise☆37Jan 7, 2022Updated 4 years ago
- Indicators of compromise☆19May 18, 2026Updated 5 months ago
- A harmless cryptocurrency miner simulator for detection testing. Generates realistic mining-like artifacts without consuming resources or…☆15Feb 3, 2026Updated 8 months ago
- Quick lookup files for SUNBURST Backdoor☆12Dec 15, 2020Updated 5 years ago
- Super light, super fast, unlimited search idea☆26Aug 3, 2025Updated last year
- Examine Chrome extensions for security issues☆102Nov 16, 2025Updated 11 months ago
- ☆107Jul 5, 2025Updated last year
- Globally distributed honeypots and HoneyNets IOCs and file reversing☆16Apr 22, 2024Updated 2 years ago
- Aether is a Windows memory-forensics and threat hunting tool that scans live process memory for malicious pattern, detect injection techn…☆66Jul 5, 2026Updated 3 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A pySigma wrapper and langchain toolkit for automatic rule creation/translation☆98Nov 3, 2025Updated 11 months ago
- A proof-of-concept re-assembler for reverse VNC traffic.☆24May 21, 2023Updated 3 years ago
- Remote access and Antivirus Logging Database☆45Apr 27, 2026Updated 6 months ago
- ☆22Dec 22, 2020Updated 5 years ago
- ☆2,941Updated this week
- SACTI - Securely aggregate CTI sightings and report them on MISP☆14Oct 24, 2022Updated 4 years ago
- A Productivity-Boosting Burp Suite extension written in Kotlin that enables persistent sticky session handling in web application testing…☆15Oct 8, 2025Updated last year