Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

Open Source Cloud Native Application Protection Platform (CNAPP)

All-in-One malware analysis tool.

Extract and aggregate threat intelligence.

学习安全运营的记录 | The knowledge base of security operation

Advanced Sysmon ATT&CK configuration focusing on Detecting the Most Techniques per Data source in MITRE ATT&CK, Provide Visibility into Forensic Artifact Events for UEBA, Detect Exploitation events with wide CVE Coverage, and Risk Scoring of CVE, UEBA, Forensic, and MITRE ATT&CK Events.

Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.

A collection of real-world threat model examples across various technologies, providing practical insights into identifying and mitigating security risks.

A web honeypot library to create vulnerable-looking endpoints to detect and mislead attackers

A powerful and user-friendly browser extension that streamlines investigations for security professionals.

ATHF is a framework for agentic threat hunting - building systems that can remember, learn, and act with increasing autonomy.

Don't Just Search OSINT. Sweep It.

🔥 一个集成多源威胁情报的聚合平台，为安全研究人员和运维团队提供实时威胁情报查询和播报服务;集成阿里云WAF主动拦截威胁IP，钓鱼邮件实时监测，集成AI等多项常用安全类工具🔧

Find phishing kits which use your brand/organization's files and image.

Free email OSINT tool, 2500+ platforms, identity clustering, breach detection. No API keys required. pip install mailaccess

pretrained BERT model for cyber security text, learned CyberSecurity Knowledge

🚀 This is a collection of hacking🔥 and pentesting 🧐 scripts to help with enumeration, OSINT, exploitation and post exploitation automated scripts to make hacking easier🌠. Have fun!😎

Raw data from Threat Intelligence Reports with automatic reports collection and keyword search across thousands of reports

Graylog Processing Pipeline functions to enrich log messages with IoC information from threat intelligence databases