cyberthreatintelligence

A list of OSINT tools & resources for (fraud-)investigators, CTI-analysts, KYC, AML and more.

A collection & lists of intel and usernames scraped from various cybercrime sources & forums. DarkForums, HackForums, Patched, Cracked, BreachForums, OGUser, XSS, Dread, & more

Here's samples of android/ios spyware named "Pegasus" made by the NSOGROUP

An analytical challenge created to test junior analysts looking to try performing proactive and reactive cyber threat intelligence.

An ongoing & curated collection of awesome software best practices and remediation techniques, libraries and frameworks, E-books and videos, Technical guidelines and important resources about Threat Intelligence.

MISP-STIX-Converter - Python library to handle the conversion between MISP and STIX formats

Graph Representation of MITRE ATT&CK's CTI data

Cyber Threat Intelligence Capability Maturity Model (CTI-CMM), a dedicated maturity framework to empower your team. Inspired by industry needs, curated by those in trenches.

An online service for converting cyber threat intelligence format, built to promote interoperability and seamless data exchange

YAFRA is a semi-automated framework for analyzing and representing reports about IT Security incidents.

Sharing our knowledge and resources in the field of cyber security.

The NSE Script plugin integrates with Criminal IP CTI search engine for network scanning, showing IP details like WHOIS, running products, versions, CVEs, etc.

SACTI - Securely aggregate CTI sightings and report them on MISP

Dans le cadre de l’amélioration continue des capacités de veille cyber, ce projet vise à fournir une synthèse quotidienne des menaces émergentes à partir de sources ouvertes fiables, notamment via l’agrégation de flux RSS spécialisés.

A new way for you to structure your threat content.

This directory contains a templates for you to build your own system.

A lightweight REST API built with Go and Fiber that analyzes a website’s HTTP security response headers. It checks the presence of key headers, computes a weighted score (0–100), and returns a letter grade (A–F) with a human‑readable summary.

To extract the usernames attempted by a compromised host. This information is obtained from Abuse IP DB, reports' comments.

Experimental RAG that consumes Cyber Security articles via RSS

Criminal IP is a comprehensive OSINT-based Cyber Threat Intelligence (CTI) search engine that can be used as an automated Attack Surface Management solution.