openioc-to-stix

The DFIR Report

In-depth threat intelligence reports and services providing insights into real-world intrusions, malware analysis, and threat briefs.

EQL Analytics Library

A library of event-based analytics written in EQL to detect adversary behaviors, now integrated into the Detection Engine of Kibana.

TypeDB CTI

An open source threat intelligence platform for storing and managing cyber threat intelligence knowledge.

abuse.ch

Platform providing community-driven threat intelligence on cyber threats with a focus on malware and botnets.

AbuseHelper

AbuseHelper is an open-source framework for receiving and redistributing abuse feeds and threat intel.

WebTrap

Create deceptive webpages to deceive and redirect attackers away from real websites by cloning them.

ShadowServer

A nonprofit security organization that collects and shares threat data to make the Internet more secure.

Security Datasets

Open-source initiative providing malicious and benign datasets to expedite data analysis and threat research.

Halogen

Automatically create yara rules based on images embedded in office documents.