IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
The Correlated CVE Vulnerability And Threat Intelligence Database API
A simple application that extracts your IoCs from garbage input and checks their reputation using multiple CTI services.
Kestrel threat hunting language: building reusable, composable, and shareable huntflows across different data sources and threat intel.
This project consists of an open source library allowing software to connect to data repositories using STIX Patterning, and return results as STIX Observations.
Collecting & Hunting for IOCs with gusto and style
PatrowlHears - Vulnerability Intelligence Center / Exploits
Consolidation of various resources related to Microsoft Sysmon & sample data/log
ThreatSeeker: Threat Hunting via Windows Event Logs
Curating Falco rules with MITRE ATT&CK Matrix
Prowler Studio an AI workflow that ensures Claude Code follows Prowler's guardrails to deliver consistent, tested, and PR-ready threat detection checks, remediations and update compliance frameworks.
Automated threat intelligence collection with McAfee ATD, OpenDXL and MISP
ATLAS - Malware Analysis Description
PoC for Exploiting CVE-2024-31848/49/50/51 - File Path Traversal
This tool will help you to find CVEs, exploits, or possible 0-Days for a specific technology.
A bot to quickly get information about an IP, useful to get threat intelligence informations for blue team.
Add a description, image, and links to the threat topic page so that developers can more easily learn about it.
To associate your repository with the threat topic, visit your repo's landing page and select "manage topics."