Threat Intelligence

AI security solution protecting models, agents, data, and prompts

AI-powered security assistant for autonomous threat detection and response

GenAI-powered malware analysis tool for unknown & zero-day threats

AI-powered security platform for threat detection, automation, and AI protection

AI-powered threat intelligence platform with generative AI capabilities

Threat intelligence platform providing real-time data from 300bn+ daily IPs

A tool for identifying potential security threats by fetching known URLs and filtering out URLs with open redirection or SSRF parameters.

VirusTotal API v3 is a threat intelligence platform for scanning files, URLs, and IP addresses, and retrieving reports on threat reputation and context.

Multiplatform endpoint security with detection and response capabilities

A cybersecurity blog from Microsoft, featuring articles and guides on various security topics, including AI, threat intelligence, cloud security, and incident response.

An open-source OSINT honeypot that monitors threat actor reconnaissance attempts and generates early-warning intelligence for blue teams during the pre-attack phase.

A platform for accessing threat intelligence and collaborating on cyber threats.

HoneyFS is an LLM-powered honeypot tool that generates realistic fake file systems using GPT-3.5 to deceive attackers and enhance security analysis.

A defense-in-depth security automation framework for AWS that combines threat intelligence, machine learning, and serverless technologies to prevent, detect, and respond to threats through automated security telemetry collection and analysis.

A project sharing malicious URLs used for malware distribution to help protect networks.

A threat intelligence domain/IP/hash threat feeds checker that checks IPVoid, URLVoid, Virustotal, and Cymon.

A repository of freely usable Yara rules for detection systems, with automated error detection workflows.

A project providing open-source YARA rules for malware and malicious file detection

A Python library that provides an interface to query ThreatCrowd's API for threat intelligence data including email, IP, domain, and antivirus reports with built-in caching capabilities.

A toolkit that transforms PHP applications into web-based high-interaction Honeypots for monitoring and analyzing attacks.

Comprehensive suite for advanced file analysis and software supply chain security.

Cloud Sniper is a centralized cloud security operations platform that provides incident response, threat correlation, and automated security actions for cloud infrastructure protection.

A knowledge base of analytics developed by MITRE based on the MITRE ATT&CK adversary model.

MetaDefender Cloud offers advanced threat prevention using technologies like Multiscanning, Deep CDR, and Sandbox.