Cowrie SSH/Telnet Honeypot http://cowrie.readthedocs.io

Advanced Sysmon configuration, Installer & Auto Updater with high-quality event tracing

Extract and aggregate threat intelligence.

Don't Just Search OSINT. Sweep It.

Find phishing kits which use your brand/organization's files and image.

A toolkit for Security Researchers

This repository contains all public indicators identified by 401trg during the course of our investigations. It also includes relevant yara rules and ids signatures to detect these indicators.

Intelligent threat hunter and phishing servers

With the hope that someone finds the data useful, we're publishing an archive of almost all of the non-sensitive vulnerability information in our vulnerability reports database. See also https://github.com/CERTCC/Vulnerability-Data-Archive-Tools

Download pcap files from http://www.malware-traffic-analysis.net/

BeSafe is robust threat analyzer which help to protect your desktop environment and know what's happening around you

This repository contains tools used by 401trg.

Looks up details on a public IPV4 address against ip-info and blacklist-search sites. Providing a quick reputation lookup for an analyst.

The goal of Engaged Threat is to provide honeypot researchers the ability to hold the attention of an attacker or to induce the attacker to participate in some sort of increased activity.

A Haskell EDSL for conducting threat analysis using Attack Trees

ip: (the) i(nternet is) p(robably down)

Phishing URL Testing Database of Link Statuses

An SSH honeypot based on the libssh library written entirely in Go.

Map and visualize SSH logins from sensors.

Generate a report containing IOCs gathered from VirusTotal and Hybrid-Analysis.

Insight aids in profiling a host by searching several online services for information about an IP or domain name.

Quick SOC L1 ticket structure

Threat detector for Windows 10

Programmatically find relationships between a list of strings using Google.

This repository contains the Dockerfile of the project ManaTI https://github.com/stratosphereips/Manati

Simple tool that you can use for collect relevant data of Portable Executable (PE) files that can be used for Intel during a line of research related with malware.

pcap analyser that uses rest api for IP/URL reputation and also for obtaining URL's

Script auto generate rules with IOC