Home / Threat Defense / Threat Management

Threat Management

Proactive threat management identifies, assesses, and neutralizes cyber risks for robust defense.

Try these 256 AI Threat Management Tools

Microsoft Sentinel and Microsoft 365 Defender
Free

Microsoft Sentinel and Microsoft 365 Defender

An all-in-one email outreach platform for finding and connecting with professionals, with features for lead discovery, email verification, and cold email campaigns.

MISP Project
Free

MISP Project

A daily collection of IOCs from various sources, including articles and tweets.

Mirai Tracker
Free

Mirai Tracker

Sigma is a generic and open signature format for SIEM systems and other security tools to detect and respond to threats.

MISP Workbench Tools
Free

MISP Workbench Tools

A database of Tor exit nodes with their corresponding IP addresses and timestamps.

MITRE ATT&CK and CAPEC Datasets in STIX 2.0
Free

MITRE ATT&CK and CAPEC Datasets in STIX 2.0

PolySwarm is a malware intelligence marketplace that aggregates threat detection engines to provide early detection, unique samples, and higher accuracy.

MISP Taxii Server
Free

MISP Taxii Server

A list of most queried domains based on passive DNS usage across the Umbrella global network.

MITRE ATT&CK®
Free

MITRE ATT&CK®

Tools to export data from MISP MySQL database for post-incident analysis and correlation.

msticpy
Free

msticpy

A set of configuration files to use with EclecticIQ's OpenTAXII implementation for MISP integration.

n6 (Network Security Incident eXchange)
Free

n6 (Network Security Incident eXchange)

In-depth threat intelligence reports and services providing insights into real-world intrusions, malware analysis, and threat briefs.

NECOMA
Free

NECOMA

A tool for extracting IOCs from various input sources and converting them into JSON format.

Non Human Identity Threat Center
Free

Non Human Identity Threat Center

Cortex is a tool for analyzing observables at scale and automating threat intelligence, digital forensics, and incident response.

nyx Threat Intelligence artifact distribution
Free

nyx Threat Intelligence artifact distribution

Taxii2 server for interacting with taxii services.

ONYPHE
Free

ONYPHE

Curated datasets for developing and testing detections in SIEM installations.

openioc-to-stix
Free

openioc-to-stix

Open Source Threat Intelligence Gathering and Processing Framework

OpenPhish
Free

OpenPhish

Public access to Indicators of Compromise (IoCs) and other data for readers of Security Scorecard's technical blog posts and reports.

OpenTAXII
Free

OpenTAXII

Dataplane.org is a nonprofit organization providing free data, tools, and analysis to increase awareness of Internet trends, anomalies, threats, and misconfigurations.

Oriana
Free

Oriana

A collection of Yara rules licensed under the DRL 1.1 License.

OSTrICa
Free

OSTrICa

Home for rules used by Elastic Security with code for unit testing, Kibana integration, and Red Team Automation.

Packet Storm
Free

Packet Storm

A library of event-based analytics written in EQL to detect adversary behaviors, now integrated into the Detection Engine of Kibana.

PasteHunter
Free

PasteHunter

CAPEC™ is a comprehensive dictionary of known attack patterns used by adversaries to exploit weaknesses in cyber-enabled capabilities.

PCAP-ATTACK
Free

PCAP-ATTACK

Collect various intelligence sources for hosts in CSV format.

Phantom Threat Inteliigence
Free

Phantom Threat Inteliigence

Cyber Intelligence Management Platform with threat tracking, forensic artifacts, and YARA rule storage.

PhishingKit-Yara-Rules
Free

PhishingKit-Yara-Rules

A modular malware collection and processing framework with support for various threat intelligence feeds.

plast
Free

plast

A tool designed to extract additional value from enterprise-wide AppCompat / AmCache data