iocs · GitHub Topics

TheHive-Project / TheHive

TheHive: a Scalable, Open Source and Free Security Incident Response Platform

Scala 3.69 k

3 年前

teler-sh / teler

Real-time HTTP Intrusion Detection

threat-hunting threat-intelligence ids intrusion-detection-system threat-analyzer Go intrusion-detection intrusion threat iocs logs log

Go 3.05 k

1 年前

TheHive-Project / Cortex

Cortex: a Powerful Observable Analysis and Active Response Engine

response dfir analysis analyzer thehive engine Scala Python REST API API security-incidents digital-forensics iocs observable 免费 free-software Open Source incident-response cyber-threat-intelligence cortex

Scala 1.43 k

9 天前

mthcht / awesome-lists

#Awesome#Awesome Security lists for SOC/CERT/CTI

blueteam hacktools redteam 安全 soc Awesome Lists cti IoC (Disambiguation)blueteam-tools detection detection-engineering dfir incident-response iocs siem threat-hunting threat-intelligence ransomware rmm

YARA 995

1 天前

curated-intel / Ukraine-Cyber-Operations

Curated Intelligence is working with analysts from around the world to provide useful information to organisations in Ukraine looking for additional free threat intelligence. Slava Ukraini. Glory to U...

ukraine OSINT cti threat-intelligence iocs threat-hunting yara Malware

YARA 924

2 年前

drb-ra / C2IntelFeeds

Automatically created C2 Feeds

iocs indicators-of-compromise threat-intelligence threatintel threat-hunting metasploit cobaltstrike cobalt-strike

REXX 618

4 天前

advanced-threat-research / Yara-Rules

Repository of YARA rules made by Trellix ATR Team

yara iocs threat-hunting threat-intelligence

YARA 599

3 个月前

mthcht / ThreatHunting-Keywords

#Awesome#Awesome list of keywords and artifacts for Threat Hunting sessions

PowerShell 580

2 个月前

TheHive-Project / TheHiveDocs

Documentation of TheHive

misp security-incidents iocs thehive cortex analyzer REST API API incident-response digital-forensics dfir 免费 free-software 文档 Open Source platform

398

2 年前

InQuest / omnibus

The OSINT Omnibus (beta release)

OSINT Python security-automation 安全 threat-intelligence iocs

Python 342

1 年前

MalwareSamples / Malware-Feed

Bringing you the best of the worst files on the Internet.

Malware viruses malware-analysis malware-research malware-detection malware-samples virustotal threatintel threat-hunting threat-intelligence malware-sample malwareanalysis Cybersecurity cyber-security iocs threat-intel

Shell 329

4 年前

NewBee119 / Ti_Collector

本项目致力于收集网上公开来源的威胁情报，主要关注信誉类威胁情报（如IP/域名等），以及事件类威胁情报。

threat-intelligence iocs threat-feeds

Python 308

8 年前

autistic-symposium / sec-pentesting-toolkit

👾 a decade of resources for security researchers: pentesting, CTF, wargames, cryptography, forensics, reverse engineering, IoCs, botnets, cloud hacking, linux hacking, steganography, vulnerabilities,...

botnets ctf wargame Cryptography iocs Linux Hacking Cybersecurity forensics post-exploitation Network pentesting 逆向工程 vulnerabilities Steganography web-security penetration-testing

C 186

6 个月前

fhightower / ioc-finder

Simple, effective, and modular package for parsing observables (indicators of compromise (IOCs), network data, and other, security related information) from text. It uses grammars rather than regexes ...

indicators-of-compromise threat-intelligence threat-hunting threat-sharing threatintel cidr-range ipv4 iocs observable grammars malware-research malware-analysis Hacktoberfest

Python 165

2 年前

assafmo / xioc

Extract indicators of compromise from text, including "escaped" ones.

IoC (Disambiguation)iocs extract extraction text-mining text-processing indicators-of-compromise command-line-tool 命令行界面 defang Regular expression data-mining

Go 160

5 年前

fox-it / cobaltstrike-beacon-data

Open Dataset of Cobalt Strike Beacon metadata (2018-2022)

Python JSON pandas Jupyter Notebook dataset cobaltstrike beacon threat-intelligence research iocs indicators-of-compromise

Jupyter Notebook 125

3 年前

fox-it / cobaltstrike-extraneous-space

Historical list of {Cobalt Strike,NanoHTTPD} servers

cobaltstrike iocs

121

6 年前

cert-lv / exchange_webshell_detection

Detect webshells dropped on Microsoft Exchange servers exploited through "proxylogon" group of vulnerabilites (CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065)

Cybersecurity 安全 exchange-server iocs blueteam

PowerShell 98

4 年前