CyberAlerts
ThreatMiner is a threat intelligence portal that aggregates data from various sources and provides contextual information related to indicators of compromise (IOCs).
Proactive threat management identifies, assesses, and neutralizes cyber risks for robust defense.
ThreatMiner is a threat intelligence portal that aggregates data from various sources and provides contextual information related to indicators of compromise (IOCs).
A curated collection of Sigma & Yara rules and Indicators of Compromise (IOCs) for threat detection and malware identification.
A platform for accessing threat intelligence and collaborating on cyber threats.
Python APIs for serializing and de-serializing STIX2 JSON content with higher-level APIs for common tasks.
A community-driven list of sample security analytics for auditing cloud usage and detecting threats in Google Cloud.
A Python library for handling TAXII v1.x Messages and invoking TAXII Services.
Python-based client for IBM XForce Exchange with an improved version available.
Globally-accessible knowledge base of adversary tactics and techniques for cybersecurity.
A tool designed to extract additional value from enterprise-wide AppCompat / AmCache data
VirusTotal API v3 is a threat intelligence platform for scanning files, URLs, and IP addresses, and retrieving reports on threat reputation and context.
Tool for dataviz and statistical analysis of threat intelligence feeds, presented in cybersecurity conferences for measuring IQ of threat intelligence feeds.
Real-time, container-based file scanning system for threat hunting and incident response.
A tool for tracking, scanning, and filtering yara files with distributed scanning capabilities.
AbuseHelper is an open-source framework for receiving and redistributing abuse feeds and threat intel.
Real-time, container-based file scanning system for threat hunting and incident response.
VirusTotal API v3 is a threat intelligence platform for scanning files, URLs, and IP addresses, and retrieving reports on threat reputation and context.
NECOMA focuses on data collection, threat analysis, and developing new cyberdefense mechanisms to protect infrastructure and endpoints.
Maltrail is a malicious traffic detection system utilizing blacklists and heuristic mechanisms.
BotScout.com provides proactive bot detection, screening, and banning through a powerful API.
Powershell Threat Hunting Module for scanning remote endpoints and collecting comprehensive information.
A set of rules for detecting threats in various formats, including Snort, Yara, ClamAV, and HXIOC.