SRA TAXII2 Server

Community Security Analytics (CSA)

A community-driven list of sample security analytics for auditing cloud usage and detecting threats in Google Cloud.

The DFIR Report

In-depth threat intelligence reports and services providing insights into real-world intrusions, malware analysis, and threat briefs.

Echotrail Insights

Search engine for Windows executable files and hashes, providing insights into file prevalence, behavior, and security information.

ThreatHunting

A Splunk app mapped to MITRE ATT&CK to guide threat hunts.

Signature-Base

YARA signature and IOC database for LOKI and THOR Lite scanners with high quality rules and IOCs.

FileIntel

A modular tool for collecting intelligence sources for files and outputting in CSV format.

June's Sophisticated npm Attack Attributed to North Korea

A sophisticated npm attack attributed to North Korean threat actors, targeting technology firms and their employees.

DeepBlueCLI

A PowerShell module for threat hunting via Windows Event Logs