Repo for experimenting and testing MCP server builds for CTI-related research.
☆27May 13, 2025Updated last year
Alternatives and similar repositories for mcp-cti
Users that are interested in mcp-cti are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- This is a repository to experiment with MCP for security☆52Jan 22, 2025Updated last year
- YARA Standalone WSS is an offline webshell scanning tool that uses YARA rules to detect malicious or suspicious files in webroot director…☆13Aug 4, 2025Updated last year
- Scripts for importing threat feeds and CTI articles, blogs, and reports into MISP.☆18Jun 28, 2026Updated 4 months ago
- Jupyter Univere is a search engine for all infosec jupyter notebooks☆38Mar 24, 2025Updated last year
- ☆21Jul 29, 2025Updated last year
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Azure function to insert MISP data in to Azure Sentinel☆34Oct 19, 2022Updated 4 years ago
- Cyber Threat Intelligence☆83Dec 7, 2025Updated 10 months ago
- A Shodan-based tool to discover publicly exposed Ollama instances and list available LLM models.☆25May 27, 2025Updated last year
- Turn any blog into structured threat intelligence.☆64Oct 19, 2026Updated 2 weeks ago
- 🐻❄️ 🏹 Threat hunting with Polars and flaws.cloud AWS CloudTrail datasets.☆15May 22, 2024Updated 2 years ago
- Windows Event Log Audit Configuration Baselines and Guidelines. Automated monitoring of audit policy settings across different security f…☆14Updated this week
- Leveraging MISP indicators via a pDNS-based infrastructure as a poor man’s SOC.☆57Oct 22, 2025Updated last year
- 🛡️ VIPER: Stay ahead of threats with AI-driven vulnerability intelligence. Prioritize CVEs effectively using NVD, EPSS, CISA KEV, and Go…☆96Aug 13, 2025Updated last year
- A vendor-neutral collection of Sigma, YARA, and Suricata rules for detecting compromise of LLM applications, MCP servers, ML supply chain…☆141Updated this week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- 🛡️ SIGMA Detection Engineering Platform A comprehensive AI-powered detection engineering platform for security teams to explore MITRE AT…☆44Jun 28, 2025Updated last year
- BCP documents and website of GCVE☆58Updated this week
- TTPMapper is an AI-driven threat intelligence parser that converts unstructured reports whether from web URLs or PDF files into structure…☆58Jun 21, 2025Updated last year
- ☆18May 6, 2023Updated 3 years ago
- Web-based IOC management platform with threat intelligence enrichment for SOC teams☆22Jun 20, 2026Updated 4 months ago
- Using MCP is fun with Cyberbro!☆19Oct 18, 2026Updated 2 weeks ago
- A Threat-Actor explorer (browser-local) from the MISP galaxy dataset☆19Oct 25, 2026Updated last week
- Douglas Mun's Technical Guidebooks☆30Sep 12, 2026Updated last month
- MISP Playbooks☆237Oct 14, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Factual rules are YARA rules to find legitimate software on raw disk acquisition.☆13Jan 18, 2022Updated 4 years ago
- Extracts IoCs, TTPs and the relationships between them. Outputs a STIX 2.1 bundle.☆87Sep 17, 2026Updated last month
- Emails classification template using python. Technology stack: docker-compose, jupyter notebooks, fastapi, airflow, posgreSQL, superset, …☆11May 8, 2019Updated 7 years ago
- Open Source Platform for storing, organizing, and searching documents related to cyber threats☆174Nov 10, 2023Updated 2 years ago
- Welcome to the SEKOIA.IO Community repository!☆198Oct 21, 2026Updated 2 weeks ago
- Mappings Editor is an interactive, web-based tool created by the Center for Threat-Informed Defense for creating mappings of security cap…☆15Updated this week
- Pulls IOCs from MISP and adds the to reference sets in QRadar☆33May 18, 2026Updated 5 months ago
- Common Exercise Format - CEXF☆11Aug 15, 2024Updated 2 years ago
- Threat hunting with Sysmon and ArangoDB Graphs☆13Apr 16, 2020Updated 6 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Lua plugin to extract data from Wireshark and convert it into MISP format☆50Oct 23, 2023Updated 3 years ago
- Have you ever wanted to search a link or IP address on multiple OSINT pages at once?☆68Jul 7, 2025Updated last year
- This is an incident response playbook we created for the Vercel April 2026 compromise☆31Apr 21, 2026Updated 6 months ago
- An index of publicly available and open-source threat detection rulesets.☆141Apr 17, 2025Updated last year
- A collection of tips for using MISP.☆77Dec 11, 2024Updated last year
- A collection of CVEs weaponized by ransomware operators☆156Aug 30, 2026Updated 2 months ago
- SkillAegis is a platform to design, run, and monitor exercise scenarios, enhancing skills in applications like MISP and training users in…☆40Jul 20, 2026Updated 3 months ago