OSINT Feeds from Bambenek Consulting

Community Projects - RiskAnalytics

Fidelis Barncat - Extensive malware config database (must request access).

CINSscore.com

Critical Stack- Free Intel Market - Free intel aggregator with deduplication featuring 90+ feeds and over 1.2M indicators.

CyberCrime

Cyber crime

FireEye IOCs - Indicators of Compromise shared publicly by FireEye.

FireHOL IP Lists | IP Blacklists | IP Reputation Feeds

350 ip blacklists ip blocklists and ip reputation feeds about cybercrime fraud botnets alware virus abuse attacks open proxies anonymizers see their changes and updates size over time retention policy geographic coverage comparisons and overlaps

HoneyDB

hpfeeds - Honeypot feed protocol.

Malware Statistics :: INFOSEC - CERT-PA

This section contains statistics about latest malware families detected in the wild aggregated by import table hash aka imphash and the top 10 for malicious domains and ip addresses also available the full list for fqdn ip addresses and malicious ur ls collected in the latest 7 days

InQuest Labs - InQuest.net

In quest labs is an open interactive and api driven data portal for security researchers available is an evergrowing corpus of pre dissected benign and malicious samples aggregation of public reputation feeds a low fidelity database of io cs sourced from interesting folks on twitter and a collec

InQuest Labs - InQuest.net

In quest labs is an open interactive and api driven data portal for security researchers available is an evergrowing corpus of pre dissected benign and malicious samples aggregation of public reputation feeds a low fidelity database of io cs sourced from interesting folks on twitter and a collec

SANS Internet Storm Center

malc0de - Searchable incident database.

MDL

MetaDefender Threat Intelligence Feed - List of the most looked up file hashes from MetaDefender Cloud.

Free Security Software | FireEye

Get free security software by fire eye browse our free security tools to help keep your organization safe from cyber threats

Emerging Threat Intelligence - Cyber Threat Solutions | Proofpoint US

Discover how proofpoint emerging threat intelligence delivers timely and accurate cyber threat intelligence to provide deeper context and seamless integration with security tools

Ransomware Overview - Google Drive

STIX - Structured Threat Information Expression (Archive) | STIX Project Documentation

CAPEC - Common Attack Pattern Enumeration and Classification (CAPEC™)

Common attack pattern enumeration and classification capec is a list of software weaknesses

CybOX - Cyber Observable Expression | CybOX Project Documentation

MAEC - Malware Attribute Enumeration and Characterization | MAEC Project Documentation

Trusted Automated eXchange of Indicator Information (TAXII™) | TAXII Project Documentation

SystemLookup - An online database of what’s good and bad on your computer

ThreatMiner.org | Data Mining for Threat Intelligence

Threat miner is a threat intelligence portal that provides information on indicators of compromise ioc such as domains ip address malware samples md5 sha1 and sha256 ssl certificates whois information and malicious ur ls such as phishing and malware links

threatRECON - Search for indicators, up to 1000 free per month.

ThreatShare - Home

Threat share is a free malware threatfeed created for security researchers and malware analysts developed by fr3dhk

Yara rules - Yara rules repository.

YETI - Yeti is a platform meant to organize observables, indicators of compromise, TTPs, and knowledge on threats in a single, unified repository.

ZeuS Tracker - ZeuS blocklists.