A list of books suggested by the security community to aid intelligence analysts learn to think
☆27Aug 7, 2023Updated 3 years ago
Alternatives and similar repositories for IntelAnalystBookClub
Users that are interested in IntelAnalystBookClub are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A public repository of MITRE ATT&ACK TTP mappings by BushidoUK for OSINT reports that lack a section breaking down the TTPs.☆27Mar 20, 2025Updated last year
- pySigma Splunk backend☆46Sep 27, 2026Updated 2 weeks ago
- Creating a Feed of MISP Events from ThreatFox (by abuse.ch)☆18Jun 2, 2021Updated 5 years ago
- A tool to support the reporting of Authenticode Certificates by reducing the effort on individuals to report.☆40Mar 25, 2026Updated 6 months ago
- The Threat Actor Profile Guide for CTI Analysts☆121Jul 15, 2023Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Sample of a Malicious baseband signed by Apple☆10May 12, 2022Updated 4 years ago
- PS-TrustedDocuments: PowerShell script to handle information on trusted documents for Microsoft Office☆37Mar 15, 2023Updated 3 years ago
- ☆22Jan 2, 2026Updated 9 months ago
- Share threat intelligence and detect tools about APT "NightEgle" (APT-Q-95)☆39Jul 4, 2025Updated last year
- A maturity workbook for NIST CSF 2.0☆25Mar 2, 2024Updated 2 years ago
- Helping defenders learn and validate npm supply-chain detections with safe atomic tests.☆34Oct 30, 2025Updated 11 months ago
- Supply Chain Security Research - Attack Trees☆11Jan 9, 2023Updated 3 years ago
- A simple DNS exfiltration script☆11Apr 17, 2023Updated 3 years ago
- A few STUXNET samples and live traffic captures from July 2010 while many stuxnet implants were still operational.☆28Sep 17, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- RE tooling kit for Apple modem baseband☆15Sep 17, 2022Updated 4 years ago
- Moto E4☆13Oct 17, 2017Updated 8 years ago
- ☆18Dec 18, 2022Updated 3 years ago
- Using Microsoft 365 App Passwords for persistence☆23Sep 2, 2020Updated 6 years ago
- IVRE's fork of the famous TCP port scanner. See below for details.☆39Jan 28, 2025Updated last year
- ATHI — An AI Threat Modeling Framework for Policymakers☆66Aug 21, 2023Updated 3 years ago
- The LOLBins CTI-Driven (Living-Off-the-Land Binaries Cyber Threat Intelligence Driven) is a project that aims to help cyber defenders und…☆131Apr 6, 2024Updated 2 years ago
- ☆16Feb 11, 2019Updated 7 years ago
- This python script performs a number of sqlite queries (mainly password metadata) against sqlite databases (Created by ROADtools) to prov…☆22Jul 3, 2024Updated 2 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- A small go tool to upload JSON files to the BloodHound community edition API☆33May 29, 2024Updated 2 years ago
- ShellSweeping the evil.☆53Jun 18, 2024Updated 2 years ago
- simple C# portscanner - written for playing around with Metasploit's Execute-Assembly☆10Jul 1, 2023Updated 3 years ago
- ☆16Dec 16, 2020Updated 5 years ago
- 🔦 Uncovers a censored email's domain☆41Jun 15, 2023Updated 3 years ago
- ☆41Feb 23, 2023Updated 3 years ago
- https://github.com/Swiftonsecurity/sysmon-config☆11Nov 8, 2018Updated 7 years ago
- ☆16Jan 9, 2025Updated last year
- GitHub landing page repo☆12May 14, 2026Updated 4 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Search emails with Netlas.io☆25Aug 4, 2023Updated 3 years ago
- Demos for Black Hat Europe 2025's The Forensic Trail On GitHub: Hunting For Supply Chain Activity☆28Dec 5, 2025Updated 10 months ago
- Remote access and Antivirus Logging Database☆44Apr 27, 2026Updated 5 months ago
- This repository contains procedures found in the Feb 2022 conti leaks. They were taken from the "manual_teams_c" rocketchat channel in th…☆86Mar 3, 2022Updated 4 years ago
- ☆19Mar 13, 2024Updated 2 years ago
- A tool to reverse engineer and inspect the RPM and APT databases to list all the packages along with executables, service, versions and C…☆19Updated this week
- A not so awesome list of adversary emulation gems for aspiring red/blue/purple teamers☆17Jul 19, 2022Updated 4 years ago