MANTIS Cyber-Intelligence Management Framework

June's Sophisticated npm Attack Attributed to North Korea

A sophisticated npm attack attributed to North Korean threat actors, targeting technology firms and their employees.

CyberAlerts

A threat intelligence and vulnerability monitoring platform that aggregates security alerts from trusted sources and provides customizable monitoring and notification capabilities.

Yara Scanner

A tool for tracking, scanning, and filtering yara files with distributed scanning capabilities.

MITRE ATT&CK and CAPEC Datasets in STIX 2.0

Repository containing MITRE ATT&CK and CAPEC datasets in STIX 2.0 for cybersecurity threat modeling.

Combine

Gathers Threat Intelligence Feeds from publicly available sources and provides detailed output in CSV format.

GCTI Open Source Detection Signatures

GCTI's open-source detection signatures for malware and threat detection

APT Groups and Operations

A comprehensive list of APT groups and operations for tracking and mapping different names and naming schemes used by cybersecurity companies and antivirus vendors.

SSLBL - SSL Blacklist

A project that detects malicious SSL connections by identifying and blacklisting SSL certificates used by botnet C&C servers and identifying JA3 fingerprints to detect and block malware botnet C&C communication.

yaml2yara

A tool for creating custom detection rules from YAML input