Threat Intelligence

AbuseHelper - An open-source framework for receiving and redistributing abuse feeds and threat intel.

AlienVault - Open Threat Exchange

Learn about the latest cyber threats research collaborate and share threat intelligence in real time protect yourself and the community against today s emerging threats

Combine - Tool to gather Threat Intelligence indicators from publicly available sources.

Fileintel - Pull intelligence per file hash.

Hostintel - Pull intelligence per host.

ENISA

IOC Editor | Free Security Software | FireEye

Ioc editor is a free tool that provides an interface for managing data

iocextract - Advanced Indicator of Compromise (IOC) extractor, Python library and command-line tool.

ioc_writer - Python library for working with OpenIOC objects, from Mandiant.

MalPipe - Malware/IOC ingestion and processing engine, that enriches collected data.

Massive Octo Spice - Previously known as CIF (Collective Intelligence Framework). Aggregates IOCs from various lists. Curated by the

MISP - Malware Information Sharing Platform curated by

Threat Intelligence - Pulsedive

Pulsedive is a free threat intelligence platform search scan and enrich i ps ur ls domains and other io cs from osint feeds or submit your own

PyIOCe - A Python OpenIOC editor.

RiskIQ Community Edition

threataggregator - Aggregates security threats from a number of sources, including some of those listed below in

Threat Crowd | Threatcrowd.org Open Source Threat Intelligence

ThreatIngestor - Build automated threat intel pipelines sourcing from Twitter, RSS, GitHub, and more.

ThreatTracker - A Python script to monitor and generate alerts based on IOCs indexed by a set of Google Custom Search Engines.

TIQ-test - Data visualization and statistical analysis of Threat Intelligence feeds.