vt-url
VirusTotal API v3 is a threat intelligence platform that provides a suite of APIs for scanning files, URLs, and IP addresses, and retrieving reports on threat reputation and context. It integrates with various security tools and platforms, including Splunk, Palo Alto Cortex XSOAR, and Crowdstrike. The API offers a range of endpoints for uploading files, retrieving file reports, scanning URLs, and getting domain and IP address reports. The API is designed with ease of use and uniformity in mind, following the REST principles and using JSON for requests and responses. It exposes richer data, including IoC relationships, sandbox dynamic analysis information, static information for files, YARA Livehunt & Retrohunt management, and crowdsourced detection details. VirusTotal API v3 is the default and encouraged way to programmatically interact with VirusTotal, and it is recommended to migrate workloads to this new version.
FEATURES
ALTERNATIVES
A collection of YARA rules for research and hunting purposes.
Unified repository for Microsoft Sentinel and Microsoft 365 Defender containing security content, detections, queries, playbooks, and resources to secure environments and hunt for threats.
Signature-based YARA rules for detecting and preventing threats within Linux, Windows, and macOS systems.
Container of 200 Windows EVTX samples for testing detection scripts and training on DFIR.
Tools to export data from MISP MySQL database for post-incident analysis and correlation.
A tool for navigating and annotating ATT&CK matrices with the ability to define custom layers for specific views.
Collection of Yara rules for file identification and classification
PINNED
Fabric Platform by BlackStork
Fabric Platform is a cybersecurity reporting solution that automates and standardizes report generation, offering a private-cloud platform, open-source tools, and community-supported templates.
Mandos Brief Newsletter
Stay ahead in cybersecurity. Get the week's top cybersecurity news and insights in 8 minutes or less.
Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
Adversa AI
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.