IntelMQ
IntelMQ is a solution for IT security teams (CERTs & CSIRTs, SOCs abuse departments, etc.) for collecting and processing security feeds (such as log files) using a message queuing protocol. It's a community driven initiative called IHAP1 (Incident Handling Automation Project) which was conceptually designed by European CERTs/CSIRTs during several InfoSec events. Its main goal is to give to incident responders an easy way to collect & process threat intelligence thus improving the incident handling processes of CERTs. IntelMQ is frequently used for: automated incident handling situational awareness automated notifications as data collector for other tools and more! The design was influenced by AbuseHelper however it was re-written from scratch and aims at: Reducing the complexity of system administration Reducing the complexity of writing new bots for new data feeds Reducing the probability of events lost in all process with persistence functionality (even system crash) Use and improve the existing Data Harmonization Ontology Use JSON format for all messages Provide easy way to store data into databases and log collectors such as PostgreSQL, Elasticsearch and Splunk Pro
FEATURES
ALTERNATIVES
AbuseHelper is an open-source framework for receiving and redistributing abuse feeds and threat intel.
A free threat intelligence feed and banlist feed of known malicious IP addresses for public use only.
Nessus efficiently scans for system vulnerabilities, misconfigurations, and compliance issues.
A threat hunting tool for Windows event logs to detect APT movements and decrease the time to uncover suspicious activity.
A system for collecting, managing, and distributing security information on a large scale, developed by CERT Polska.
A collection of YARA rules for research and hunting purposes.
PINNED
InfoSecHired
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.
Mandos Brief Newsletter
A weekly newsletter providing cybersecurity leadership insights, industry updates, and strategic guidance for security professionals advancing to management positions.
Kriptos
An AI-driven data classification and governance platform that automatically discovers, analyzes, and labels sensitive information while providing risk management and compliance capabilities.
System Two Security
An AI-powered platform that automates threat hunting and analysis by processing cyber threat intelligence and generating customized hunt packages for SOC teams.
Aikido Security
Aikido is an all-in-one security platform that combines multiple security scanning and management functions for cloud-native applications and infrastructure.
Permiso
Permiso is an Identity Threat Detection and Response platform that provides comprehensive visibility and protection for identities across multiple cloud environments.
Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
Adversa AI
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.