threatintel

Defund the Police.

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

Cowrie SSH/Telnet Honeypot https://cowrie.readthedocs.io

Sysmon configuration file template with default high-quality event tracing

Intel Owl: analyze files, domains, IPs in multiple ways from a single API at scale

Phishing catcher using Certstream

Your Everyday Threat Intelligence

Utilities for Sysmon

CLI tool for open source and threat intelligence

Repositório criado com intuito de reunir informações, fontes(websites/portais) e tricks de OSINT dentro do contexto Brasil.

The Correlated CVE Vulnerability And Threat Intelligence Database API

OSINT from your favorite services in a friendly terminal user interface - integrations for Virustotal, Shodan, and Censys

Powerful plugins and add-ons for hackers

Extract and aggregate threat intelligence.

Advanced Sysmon ATT&CK configuration focusing on Detecting the Most Techniques per Data source in MITRE ATT&CK, Provide Visibility into Forensic Artifact Events for UEBA, Detect Exploitation events with wide CVE Coverage, and Risk Scoring of CVE, UEBA, Forensic, and MITRE ATT&CK Events.

StalkPhish - The Phishing kits stalker, harvesting phishing kits for investigations.

Defanged Indicator of Compromise (IOC) Extractor.

Awesome collection of great and useful resources concerning intelligence writing such as manuals/guides, standards, books, and articles

Public Repository of Open Source Tools for Cyber Threat Intelligence Analysts and Researchers