MISP (core software) - Open Source Threat Intelligence and Sharing Platform
翻译 - MISP(核心软件)-开源威胁情报和共享平台(以前称为恶意软件信息共享平台)
TheHive: a Scalable, Open Source and Free Security Incident Response Platform
翻译 - TheHive:可扩展,开源和免费的安全事件响应平台
Indicators of Compromises (IOC) of our various investigations
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
ThePhish: an automated phishing email analysis tool
翻译 - ThePhish:一种自动化的网络钓鱼电子邮件分析工具
Watcher - Open Source Cybersecurity Threat Hunting Platform. Developed with Django & React JS.
翻译 - Watcher-开源网络安全威胁搜寻平台。用Django&React JS开发。
Extract and aggregate threat intelligence.
翻译 - 提取并汇总威胁情报。
This repository contains Open Source freely usable Threat Intel feeds that can be used without additional requirements. Contains multiple types such as IP, URL, CVE and Hash.
Warning lists to inform users of MISP about potential false-positives or other information in indicators
Clusters and elements to attach to MISP events or attributes (like threat actors)
Documentation and Sharing Repository for ThreatPinch Lookup Chrome & Firefox Extension
Modules for expansion services, enrichment, import and export in MISP and other tools.
🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.
A (nearly) production ready Dockered MISP