ioc-fang / ioc-fanger
Fang and defang indicators of compromise. You can test this project in a GUI here: http://ioc-fanger.hightower.space .
☆55Updated 11 months ago
Related projects: ⓘ
- Pythonic way to work with the warning lists defined there: https://github.com/MISP/misp-warninglists☆29Updated this week
- Converting data from services like Censys and Shodan to a common data model☆48Updated last week
- YETI (Your Everyday Threat Intelligence) Integration to Elastic Stack☆15Updated 3 years ago
- ☆40Updated this week
- A utility to trawl phishing domains and attempt to identify phishing kits as well as other malicious activity☆36Updated 2 years ago
- Easy way to create a MISP event related to a Phishing page☆17Updated last year
- Validates yara rules and tries to repair the broken ones.☆38Updated 4 years ago
- ☆24Updated last year
- Open source training materials for law-enforcement and organisations interested in DFIR.☆55Updated 2 years ago
- CyCAT.org API back-end server including crawlers☆30Updated last year
- Home to the ActorTrackr source code☆27Updated 7 years ago
- References for FIRST CTI 2019 Symposium presentation☆23Updated 5 years ago
- pocket guide for core threat hunting concepts☆23Updated 4 years ago
- Python module to use the MISP Taxonomies☆29Updated last week
- Repository of all the sites related to infosec IP/Domain/Hash/SSL/etc OSINT and eventually will include more.☆63Updated 4 months ago
- The Fastest way to consume Threat Intel☆25Updated 2 years ago
- Best practices in threat intelligence☆46Updated last year
- ☆33Updated 3 years ago
- InvestigationPlaybookSpec☆72Updated 6 years ago
- Utilizing your Threat data from a MISP instance into CarbonBlack Response by exposing the data in the Threat Intelligence Feed.☆19Updated 2 years ago
- Knowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)☆94Updated 3 months ago
- Searches for Insider Threat Hunting☆30Updated 5 years ago
- Imports Alienvault OTX pulses to a MISP instance☆52Updated 2 years ago
- ☆33Updated 4 years ago
- pollen - A command-line tool for interacting with TheHive☆34Updated 5 years ago
- Scripts for accessing and transforming cyber threat intelligence☆24Updated 8 years ago
- Expert Investigation Guides☆50Updated 3 years ago
- A collection of typical false positive indicators☆54Updated 3 years ago
- Website crawler with YARA detection☆87Updated last year
- For storing of the volumes☆3Updated 4 years ago