BotScout.com
Repository of automatically generated YARA rules from Malpedia's YARA-Signator with detailed statistics.
Proactive threat management identifies, assesses, and neutralizes cyber risks for robust defense.
Repository of automatically generated YARA rules from Malpedia's YARA-Signator with detailed statistics.
CIFv3 is the next version of the Cyber Intelligence Framework, developed against Ubuntu16, encouraging users to transition from CIFv2.
Open source web app for storing and searching Actor related data from users and public repositories.
Robust Python SDK and Command Line Client for interacting with IntelOwl's API.
Sigma is a generic and open signature format for SIEM systems and other security tools to detect and respond to threats.
A nonprofit security organization that collects and shares threat data to make the Internet more secure.
AbuseIPDB offers tools and APIs to report and check abusive IPs, enhancing network security.
CAPECâ„¢ is a comprehensive dictionary of known attack patterns used by adversaries to exploit weaknesses in cyber-enabled capabilities.
A python3 application for querying sites hosting publicly pasted data and scanning for sensitive information.
A community-driven project sharing detection logic, adversary tradecraft, and resources to make detection development more efficient, following MITRE ATT&CK structure.
A comprehensive and unrestricted dataset of security incidents for research and decision-making
Sample detection rules and dashboards for Google Security Operations
Tool for visualizing correspondences between YARA ruleset and samples
A platform for accessing threat intelligence and collaborating on cyber threats.
Threat hunting tool leveraging Windows events for identifying outliers and suspicious behavior.
Packet Storm is a global security resource providing around-the-clock information and tools to mitigate personal data and fiscal loss on a global scale.
A collection of companies that disclose adversary TTPs after being breached, useful for analysis of intrusions.
A platform providing real-time threat intelligence streams and reports on internet-exposed assets to help organizations monitor and secure their attack surface.
A free and open-source OSINT framework for gathering and analyzing data from various sources
MaxMind provides accurate IP geolocation and online fraud detection solutions to create safer digital experiences.
ZoomEye is an advanced cyberspace search engine that provides detailed information on cyberspace assets, including server software and version information, for cybersecurity experts, researchers, and enterprises.
A collection of public YARA signatures for various malware families.
Forager is a threat intelligence tool that simplifies the retrieval, storage, and maintenance of threat data with a user-friendly interface and support for various data sources.