A list of books suggested by the security community to aid intelligence analysts learn to think
☆27Aug 7, 2023Updated 3 years ago
Alternatives and similar repositories for IntelAnalystBookClub
Users that are interested in IntelAnalystBookClub are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A public repository of MITRE ATT&ACK TTP mappings by BushidoUK for OSINT reports that lack a section breaking down the TTPs.☆27Mar 20, 2025Updated last year
- pySigma Splunk backend☆44Aug 25, 2026Updated last week
- Can you pay the ransom in your country?☆14Dec 18, 2023Updated 2 years ago
- Creating a Feed of MISP Events from ThreatFox (by abuse.ch)☆18Jun 2, 2021Updated 5 years ago
- A tool to support the reporting of Authenticode Certificates by reducing the effort on individuals to report.☆40Mar 25, 2026Updated 5 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- The Threat Actor Profile Guide for CTI Analysts☆122Jul 15, 2023Updated 3 years ago
- Mailpl0it is a small utility that hunts the homepage of exploit-db looking for user supplied quer(y/ies) and notifies the user via email …☆31Aug 5, 2022Updated 4 years ago
- Sample of a Malicious baseband signed by Apple☆10May 12, 2022Updated 4 years ago
- PS-TrustedDocuments: PowerShell script to handle information on trusted documents for Microsoft Office☆37Mar 15, 2023Updated 3 years ago
- Slides and resources for talks I've given☆14Jun 17, 2026Updated 2 months ago
- A tool designed to correlate evidence obtained from IoT devices☆11Nov 6, 2020Updated 5 years ago
- Share threat intelligence and detect tools about APT "NightEgle" (APT-Q-95)☆38Jul 4, 2025Updated last year
- Bunch of honey related items that spoof/decoy powersploit functions.☆17Apr 23, 2020Updated 6 years ago
- Helping defenders learn and validate npm supply-chain detections with safe atomic tests.☆35Oct 30, 2025Updated 10 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Supply Chain Security Research - Attack Trees☆10Jan 9, 2023Updated 3 years ago
- A few STUXNET samples and live traffic captures from July 2010 while many stuxnet implants were still operational.☆28Sep 17, 2024Updated last year
- Various snippets created during malware analysis☆22Apr 29, 2018Updated 8 years ago
- ☆20Jul 19, 2021Updated 5 years ago
- A library of assemblers and disassemblers derived from LLVM TableGen data☆26May 5, 2026Updated 3 months ago
- IVRE's fork of the famous TCP port scanner. See below for details.☆39Jan 28, 2025Updated last year
- Tools to assist with the configuration and management of fapolicyd.☆19Feb 1, 2026Updated 7 months ago
- my goto docker image when playing ctfs with all the tools I need☆23Aug 27, 2026Updated last week
- This python script performs a number of sqlite queries (mainly password metadata) against sqlite databases (Created by ROADtools) to prov…☆22Jul 3, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Protects and logs suspicious and malicious usage of .NET CSC.exe and Runtime C# Compilation☆25May 3, 2018Updated 8 years ago
- ShellSweeping the evil.☆53Jun 18, 2024Updated 2 years ago
- simple C# portscanner - written for playing around with Metasploit's Execute-Assembly☆10Jul 1, 2023Updated 3 years ago
- ☆16Dec 16, 2020Updated 5 years ago
- 🔦 Uncovers a censored email's domain☆42Jun 15, 2023Updated 3 years ago
- Tatsu: A C++ library/CLI tool for requesting and saving shsh blobs from apple's tatsu signing server api.☆16Aug 16, 2023Updated 3 years ago
- ☆41Feb 23, 2023Updated 3 years ago
- https://github.com/Swiftonsecurity/sysmon-config☆11Nov 8, 2018Updated 7 years ago
- A small tool to unmap PE memory dumps.☆11Nov 9, 2023Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- GitHub landing page repo☆12May 14, 2026Updated 3 months ago
- Country/Provider to IPv4 Reverse Lookup☆33Updated this week
- Placeholder for IRIS-H Digital Forensics Tool☆16May 30, 2018Updated 8 years ago
- Demos for Black Hat Europe 2025's The Forensic Trail On GitHub: Hunting For Supply Chain Activity☆27Dec 5, 2025Updated 8 months ago
- An example of how a driver can register a handle creation callback.☆16Jun 12, 2023Updated 3 years ago
- Remote access and Antivirus Logging Database☆45Apr 27, 2026Updated 4 months ago
- This repository contains procedures found in the Feb 2022 conti leaks. They were taken from the "manual_teams_c" rocketchat channel in th…☆87Mar 3, 2022Updated 4 years ago