FileIntel Logo

FileIntel

0
Free
Visit Website

FileIntel is a modular tool used to collect various intelligence sources for a given file. Files are identified by file hash (MD5, SHA1, SHA256). The output is in CSV format and sent to STDOUT, making it easy to save or pipe into another program. It works with Python v2 and v3, tested on Windows 7 and Mac OSX El Capitan.

FEATURES

ALTERNATIVES

Collection of Yara rules for file identification and classification

A daily collection of IOCs from various sources, including articles and tweets.

CAPEC™ is a comprehensive dictionary of known attack patterns used by adversaries to exploit weaknesses in cyber-enabled capabilities.

Platform providing community-driven threat intelligence on cyber threats with a focus on malware and botnets.

Lists of sources and utilities to hunt, detect, and prevent evildoers.

Sample detection rules and dashboards for Google Security Operations

Deception based detection techniques with MITRE ATT&CK mapping and Honey Resources.

RedEye is a visual analytic tool for enhancing Red and Blue Team operations.

PINNED