A list of books suggested by the security community to aid intelligence analysts learn to think
☆27Aug 7, 2023Updated 3 years ago
Alternatives and similar repositories for IntelAnalystBookClub
Users that are interested in IntelAnalystBookClub are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A public repository of MITRE ATT&ACK TTP mappings by BushidoUK for OSINT reports that lack a section breaking down the TTPs.☆27Mar 20, 2025Updated last year
- Can you pay the ransom in your country?☆14Dec 18, 2023Updated 2 years ago
- A tool to support the reporting of Authenticode Certificates by reducing the effort on individuals to report.☆40Mar 25, 2026Updated 5 months ago
- The Threat Actor Profile Guide for CTI Analysts☆122Jul 15, 2023Updated 3 years ago
- Mailpl0it is a small utility that hunts the homepage of exploit-db looking for user supplied quer(y/ies) and notifies the user via email …☆31Aug 5, 2022Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Slides and resources for talks I've given☆14Jun 17, 2026Updated 3 months ago
- ☆22Jan 2, 2026Updated 8 months ago
- A tool designed to correlate evidence obtained from IoT devices☆11Nov 6, 2020Updated 5 years ago
- Share threat intelligence and detect tools about APT "NightEgle" (APT-Q-95)☆39Jul 4, 2025Updated last year
- Bunch of honey related items that spoof/decoy powersploit functions.☆17Apr 23, 2020Updated 6 years ago
- A maturity workbook for NIST CSF 2.0☆24Mar 2, 2024Updated 2 years ago
- Helping defenders learn and validate npm supply-chain detections with safe atomic tests.☆35Oct 30, 2025Updated 10 months ago
- Supply Chain Security Research - Attack Trees☆11Jan 9, 2023Updated 3 years ago
- A simple DNS exfiltration script☆11Apr 17, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆20Jul 19, 2021Updated 5 years ago
- RE tooling kit for Apple modem baseband☆15Sep 17, 2022Updated 4 years ago
- Using Microsoft 365 App Passwords for persistence☆23Sep 2, 2020Updated 6 years ago
- IVRE's fork of the famous TCP port scanner. See below for details.☆39Jan 28, 2025Updated last year
- ATHI — An AI Threat Modeling Framework for Policymakers☆66Aug 21, 2023Updated 3 years ago
- The LOLBins CTI-Driven (Living-Off-the-Land Binaries Cyber Threat Intelligence Driven) is a project that aims to help cyber defenders und…☆133Apr 6, 2024Updated 2 years ago
- ☆16Feb 11, 2019Updated 7 years ago
- my goto docker image when playing ctfs with all the tools I need☆23Sep 9, 2026Updated 2 weeks ago
- This python script performs a number of sqlite queries (mainly password metadata) against sqlite databases (Created by ROADtools) to prov…☆22Jul 3, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Protects and logs suspicious and malicious usage of .NET CSC.exe and Runtime C# Compilation☆25May 3, 2018Updated 8 years ago
- A small go tool to upload JSON files to the BloodHound community edition API☆33May 29, 2024Updated 2 years ago
- ShellSweeping the evil.☆53Jun 18, 2024Updated 2 years ago
- simple C# portscanner - written for playing around with Metasploit's Execute-Assembly☆10Jul 1, 2023Updated 3 years ago
- ☆16Dec 16, 2020Updated 5 years ago
- ☆41Feb 23, 2023Updated 3 years ago
- reddit's python experiments framework☆12Updated this week
- https://github.com/Swiftonsecurity/sysmon-config☆11Nov 8, 2018Updated 7 years ago
- ☆16Jan 9, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- GitHub landing page repo☆12May 14, 2026Updated 4 months ago
- Country/Provider to IPv4 Reverse Lookup☆35Updated this week
- Placeholder for IRIS-H Digital Forensics Tool☆16May 30, 2018Updated 8 years ago
- Search emails with Netlas.io☆25Aug 4, 2023Updated 3 years ago
- Demos for Black Hat Europe 2025's The Forensic Trail On GitHub: Hunting For Supply Chain Activity☆28Dec 5, 2025Updated 9 months ago
- An example of how a driver can register a handle creation callback.☆16Jun 12, 2023Updated 3 years ago
- A tool to reverse engineer and inspect the RPM and APT databases to list all the packages along with executables, service, versions and C…☆17Mar 29, 2026Updated 5 months ago