stratosphereips / AIP
The Attacker IP Prioritizer(AIP) dynamically generates resource-friendly IPv4 blocklists from Zeek network flows.
☆30Updated 4 months ago
Alternatives and similar repositories for AIP:
Users that are interested in AIP are comparing it to the libraries listed below
- The Cyber Security Platform MeliCERTes is part of the European Strategy for Cyber Security. MeliCERTes is a network for establishing conf…☆31Updated 3 years ago
- Cerebrate is an open-source platform meant to act as a trusted contact information provider and interconnection orchestrator for other se…☆85Updated 3 months ago
- Converting data from services like Censys and Shodan to a common data model☆49Updated 6 months ago
- CyCAT.org API back-end server including crawlers☆29Updated 2 years ago
- Create dataset for suricata with indicators of MISP instances and add sightings in MISP if an indicator of dataset generates an alert☆37Updated 2 years ago
- Tools used by CSIRT and especially in the scope of CNW☆16Updated 5 months ago
- A commercial grade threat intelligence feed thats validated and updated every half hour.☆19Updated 2 years ago
- Yet another way to find where to report an abuse☆32Updated last month
- pcapdj - dispatch pcap files☆46Updated 4 years ago
- Knowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)☆100Updated 2 months ago
- Robust Python SDK and Command Line Client for interacting with IntelOwl's API.☆66Updated last week
- On demand query API for https://github.com/davidonzo/Threat-Intel project.☆55Updated 9 months ago
- Yara-Endpoint is a tool useful for incident response as well as anti-malware enpoint base on Yara signatures.☆106Updated 7 years ago
- Tools to interact with APTnotes reporting/index.☆100Updated 4 years ago
- ☆22Updated 10 months ago
- Validates yara rules and tries to repair the broken ones.☆39Updated 4 years ago
- Incident Response Network Tools☆24Updated 3 years ago
- Website crawler with YARA detection☆88Updated last year
- This tool maps a file's behavior on MITRE ATT&CK matrix.☆58Updated 5 years ago
- ☆52Updated this week
- The Project can be used to integrate QRadar with MISP Threat Sharing Platform☆39Updated 2 years ago
- Assemblyline 4 Malware detonation service (Cuckoo)☆17Updated last year
- YETI (Your Everyday Threat Intelligence) Integration to Elastic Stack☆16Updated 4 years ago
- CSIRT Tooling: Best Practices in Developing, Maintaining and Distributing Open Source Tools☆16Updated 2 years ago
- Definition, description and relationship types of MISP objects☆96Updated this week
- MISP website (hugo-based)☆24Updated this week
- Repository of all the sites related to infosec IP/Domain/Hash/SSL/etc OSINT and eventually will include more.☆66Updated 10 months ago
- BGP ranking is a free software to calculate the security ranking of Internet Service Provider (ASN)☆73Updated 8 months ago
- ☆24Updated 2 years ago
- ☆27Updated 6 years ago