Proactive threat management identifies, assesses, and neutralizes cyber risks for robust defense.
ThreatMiner is a threat intelligence portal that aggregates data from various sources and provides contextual information related to indicators of compromise (IOCs).
A curated collection of Sigma & Yara rules and Indicators of Compromise (IOCs) for threat detection and malware identification.
A platform for accessing threat intelligence and collaborating on cyber threats.
Collection of Yara rules for file identification and classification
Python APIs for serializing and de-serializing STIX2 JSON content with higher-level APIs for common tasks.
A Splunk app mapped to MITRE ATT&CK to guide threat hunts.
A community-driven list of sample security analytics for auditing cloud usage and detecting threats in Google Cloud.
Python-based client for IBM XForce Exchange with an improved version available.
A Python library for handling TAXII v1.x Messages and invoking TAXII Services.
Globally-accessible knowledge base of adversary tactics and techniques for cybersecurity.
A tool designed to extract additional value from enterprise-wide AppCompat / AmCache data
Tool for dataviz and statistical analysis of threat intelligence feeds, presented in cybersecurity conferences for measuring IQ of threat intelligence feeds.
A tool for tracking, scanning, and filtering yara files with distributed scanning capabilities.
Real-time, container-based file scanning system for threat hunting and incident response.
VirusTotal API v3 is a threat intelligence platform for scanning files, URLs, and IP addresses, and retrieving reports on threat reputation and context.
AbuseHelper is an open-source framework for receiving and redistributing abuse feeds and threat intel.
Real-time, container-based file scanning system for threat hunting and incident response.
BotScout.com provides proactive bot detection, screening, and banning through a powerful API.
Powershell Threat Hunting Module for scanning remote endpoints and collecting comprehensive information.
VirusTotal API v3 is a threat intelligence platform for scanning files, URLs, and IP addresses, and retrieving reports on threat reputation and context.
NECOMA focuses on data collection, threat analysis, and developing new cyberdefense mechanisms to protect infrastructure and endpoints.
Maltrail is a malicious traffic detection system utilizing blacklists and heuristic mechanisms.
A repository of cybersecurity datasets and tools curated by @sooshie.
Repository of automatically generated YARA rules from Malpedia's YARA-Signator with detailed statistics.
