Malware Signatures Overview

Darkscope

Darkscope is an AI-powered threat intelligence platform that uses virtual personas to monitor the dark web, social media, and deep web for cyber threats and security risks targeting organizations.

Cisco Umbrella Popularity List

A list of most queried domains based on passive DNS usage across the Umbrella global network.

DataPlane.org

Dataplane.org is a nonprofit organization providing free data, tools, and analysis to increase awareness of Internet trends, anomalies, threats, and misconfigurations.

Oriana

Threat hunting tool leveraging Windows events for identifying outliers and suspicious behavior.

Serverless Trap Honeyλ

A serverless application for creating and monitoring URL tokens with threat intelligence and customizable alerts.

yaraScanParser

A parsing tool for Yara Scan Service's JSON output file to help maximize benefits and automate parsing of Yara Scan Service results.

Sentinel ATT&CK

A threat hunting capability that leverages Sysmon and MITRE ATT&CK on Azure Sentinel

ThreatIngestor

An extendable tool to extract and aggregate IOCs from threat feeds, integrates with ThreatKB and MISP.

MITRE ATT&CK and CAPEC Datasets in STIX 2.0

Repository containing MITRE ATT&CK and CAPEC datasets in STIX 2.0 for cybersecurity threat modeling.