interplains / zero-breach

Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.

MISP / MISP

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

eset / malware-ioc

Indicators of Compromises (IOC) of our various investigations

Bert-JanP / Hunting-Queries-Detection-Rules

KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

thalesgroup-cert / Watcher

Watcher - Open Source AI-powered Cyber Threat Intelligence & Hunting Platform. Developed with Django & React JS.

sroberts / awesome-iocs

Curated sources of indicators of compromise, detection signatures and IOC tools.

Bert-JanP / Open-Source-Threat-Intel-Feeds

This repository contains Open Source freely usable Threat Intel feeds that can be used without additional requirements. Contains multiple types such as IP, URL, CVE and Hash.

MISP / misp-warninglists

Warning lists to inform users of MISP about potential false-positives or other information in indicators

MISP / misp-galaxy

Clusters and elements to attach to MISP events or attributes (like threat actors)

OpenCTI-Platform / connectors

OpenCTI Connectors