botvrij.eu View botvrij.eu
CIFv3 is the next version of the Cyber Intelligence Framework, developed against Ubuntu16, encouraging users to transition from CIFv2.
Proactive threat management identifies, assesses, and neutralizes cyber risks for robust defense.
CIFv3 is the next version of the Cyber Intelligence Framework, developed against Ubuntu16, encouraging users to transition from CIFv2.
Robust Python SDK and Command Line Client for interacting with IntelOwl's API.
Repository of Yara Rules created by TjNel.
Repository of automatically generated YARA rules from Malpedia's YARA-Signator with detailed statistics.
Sigma is a generic and open signature format for SIEM systems and other security tools to detect and respond to threats.
A nonprofit security organization that collects and shares threat data to make the Internet more secure.
AbuseIPDB offers tools and APIs to report and check abusive IPs, enhancing network security.
CAPECâ„¢ is a comprehensive dictionary of known attack patterns used by adversaries to exploit weaknesses in cyber-enabled capabilities.
Sample detection rules and dashboards for Google Security Operations
A community-driven project sharing detection logic, adversary tradecraft, and resources to make detection development more efficient, following MITRE ATT&CK structure.
A python3 application for querying sites hosting publicly pasted data and scanning for sensitive information.
A comprehensive and unrestricted dataset of security incidents for research and decision-making
Real-time monitoring tool for newly issued SSL certificates.
Tool for visualizing correspondences between YARA ruleset and samples
A collection of companies that disclose adversary TTPs after being breached, useful for analysis of intrusions.
Threat hunting tool leveraging Windows events for identifying outliers and suspicious behavior.
Packet Storm is a global security resource providing around-the-clock information and tools to mitigate personal data and fiscal loss on a global scale.
A platform for accessing threat intelligence and collaborating on cyber threats.
MaxMind provides accurate IP geolocation and online fraud detection solutions to create safer digital experiences.
A platform providing real-time threat intelligence streams and reports on internet-exposed assets to help organizations monitor and secure their attack surface.
A free and open-source OSINT framework for gathering and analyzing data from various sources
A collection of public YARA signatures for various malware families.
ZoomEye is an advanced cyberspace search engine that provides detailed information on cyberspace assets, including server software and version information, for cybersecurity experts, researchers, and enterprises.
ThreatMiner is a threat intelligence portal that aggregates data from various sources and provides contextual information related to indicators of compromise (IOCs).