threat-intel

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

A curated list of Awesome Threat Intelligence Blogs

Bringing you the best of the worst files on the Internet.

A community-driven repository for threat hunting ideas, methodologies, and research that serves as a central gathering place for hunters to share knowledge, collaborate on techniques, and advance the field of threat hunting.

Set of Maltego transforms to inferface with a MISP Threat Sharing instance, and also to explore the whole MITRE ATT&CK dataset.

Threat-Intel repository. API: http://github.com/davidonzo/apiosintDS

Turn any blog into structured threat intelligence.

Spydi ThreatIntel Feed is built on open-source threat intelligence, community-maintained blocklists, and public security research.

Operational Relay Box Intelligence, Tracking, & Analysis Lexicon (ORBITAL)

Collection of Suricata rule sets that I use modified to my environments.

infosec-vocabulary is a bilingual (English ↔ Bangla) cybersecurity glossary with concise definitions, synonyms, real-world examples, and short educational notes for each term. Alphabetized and workshop‑friendly, it’s ideal for learners, translators, SOC trainees, and security educators; docs-ready and GitHub Pages compatible.

YAFRA is a semi-automated framework for analyzing and representing reports about IT Security incidents.

Decentralized Cyber Threat Intelligence Kaizen Framework

Tactical Threat Intelligence & OSINT Extractor a high-performance, stealthy OSINT tool designed to scrape, extract, and analyze Indicators of Compromise (IOCs) strictly from X.com (Twitter). It leverages headless browser automation to monitor threat actors, security researchers, and malware campaigns in real-time.

Web-based IOC management platform with threat intelligence enrichment for SOC teams

PoC for Exploiting CVE-2024-31848/49/50/51 - File Path Traversal

Generate YARA rules from Windows API hashes for malware detection and hunting.

Terminal research and study client for MITRE ATT&CK®

An SSH honeypot written entirely in Go.

This repository contains hands-on Jupyter notebooks for learning threat intelligence analysis using CIRCL's open source tools and services. The workshop covers essential platforms and APIs for cybersecurity professionals and researchers.