Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/

ssh security honeypot telnet sftp scp attacker threat-sharing threatintel kippo threat-analysis cowrie deception cowrie-ssh telnet-honeypot decoy

• Updated Nov 12, 2026
• Python

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

security intelligence cybersecurity fraud-management threat-hunting malware-analysis information-exchange misp threat-sharing threatintel stix fraud-prevention cti information-security information-sharing threat-analysis fraud-detection threat-intelligence threat-intel threat-intelligence-platform

• Updated Nov 11, 2026
• PHP

Open Source Cloud Native Application Protection Platform (CNAPP)

kubernetes devops containers secops cloud-native compliance vulnerability-detection vulnerability-management observability vulnerability-scanners threat-analysis security-tools cloudsecurity devsecops scanning-tool registry-scanning cspm cwpp cnapp

• Updated Jun 1, 2026
• TypeScript

All-in-One malware analysis tool.

windows linux packer osx mcp strings static-analysis malware apk python3 ransomware elf malware-analysis termux all-in-one exe threat-analysis security-tools suspicious-files mcp-server

• Updated Sep 18, 2026
• YARA

Free email OSINT tool, 5000+ platforms, identity clustering, breach detection. No API keys required. pip install mailaccess

python open-source scraper privacy osint email email-marketing cybersecurity penetration-testing infosec email-verification threat-analysis security-tools threat-intelligence reconnaissance email-automation email-scraper email-osint osint-tool

• Updated Oct 28, 2026
• Python

Extract and aggregate threat intelligence.

ioc osint dfir threat-hunting malware-research misp threat-sharing threatintel yara threat-analysis fraud-detection intelligence-gathering security-tools threat-intelligence soar indicators-of-compromise threat-feeds threat-intelligence-platform

• Updated May 26, 2026
• Python

学习安全运营的记录 | The knowledge base of security operation

wiki cybersecurity knowledge-base soc threat-analysis security-analysis security-operations security-operation

• Updated Aug 27, 2023
• HTML

Advanced Sysmon ATT&CK configuration focusing on Detecting the Most Techniques per Data source in MITRE ATT&CK, Provide Visibility into Forensic Artifact Events for UEBA, Detect Exploitation events with wide CVE Coverage, and Risk Scoring of CVE, UEBA, Forensic, and MITRE ATT&CK Events.

graylog logging forensics dfir sysmon threat-hunting siem threat-sharing threatintel netsec sysinternals graylog-plugin forensic-analysis threat-analysis threat-intelligence humio mitre-attack sigma-rules forensicartifacts digitalforensics

• Updated Nov 5, 2023
• PowerShell

Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.

security security-audit log-analysis incident-response compliance threat-hunting siem hipaa soc threat-analysis security-automation security-tools threat-intelligence soar soc2 malware-detection log-parsing threat-detection cmmc security-operations-center

• Updated Nov 12, 2026
• TypeScript

A collection of real-world threat model examples across various technologies, providing practical insights into identifying and mitigating security risks.

threat cybersecurity threat-modeling risk-assessment threat-analysis

• Updated Jun 12, 2025

A web honeypot library to create vulnerable-looking endpoints to detect and mislead attackers

honeypot threat-hunting threat-analysis threat-intelligence deception decoy

• Updated Jan 14, 2025
• Go

A powerful and user-friendly browser extension that streamlines investigations for security professionals.

chrome-extension cybersecurity browser-extension threat-hunting threat-analysis threat-intelligence

• Updated May 13, 2025
• JavaScript

ATHF is a framework for agentic threat hunting - building systems that can remember, learn, and act with increasing autonomy.

security automation pypi cybersecurity threat-hunting siem threat-analysis security-tools threat-intelligence ai-agents threat-detection threat-response detection-engineering agentic-ai thrunting

• Updated Nov 11, 2026
• Python

A community-driven repository for threat hunting ideas, methodologies, and research that serves as a central gathering place for hunters to share knowledge, collaborate on techniques, and advance the field of threat hunting.

cybersecurity infosec threat-hunting threatintel hunting threat-analysis threat-intelligence threat-intel threat-detection threathunting cybersec infosectools threatresearch cybersecurity-tools thrunting

• Updated Nov 10, 2026
• HTML

Don't Just Search OSINT. Sweep It.

python osint splunk cybersecurity certificate-transparency ransomware threat-hunting malware-analysis scanners cybercrime threat-analysis pivoting threat-intelligence urlscan-io threatcrowd urlhaus

• Updated Jan 26, 2021
• Python

🔥 一个集成多源威胁情报的聚合平台，为安全研究人员和运维团队提供实时威胁情报查询和播报服务;集成阿里云WAF主动拦截威胁IP，钓鱼邮件实时监测，集成AI等多项常用安全类工具🔧

threat-analysis security-tools threat-intelligence threat-detection phishing-detection phishing-tool

• Updated Dec 30, 2025
• Vue

Find phishing kits which use your brand/organization's files and image.

security phishing threat-hunting fraud-prevention phishing-attacks threat-analysis fraud-detection threat-intelligence phishing-sites

• Updated Jan 21, 2019
• Python

pretrained BERT model for cyber security text, learned CyberSecurity Knowledge

nlp security apt transformers cybersecurity attention threat-hunting deeplearning cyber-security nlp-machine-learning bert threat-analysis security-automation threat-intelligence machine-learning-security cyber-threat-intelligence threat-detection transformer-encoder bert-embeddings deep-learning-security

• Updated Apr 28, 2023
• Python

🚀 This is a collection of hacking🔥 and pentesting 🧐 scripts to help with enumeration, OSINT, exploitation and post exploitation automated scripts to make hacking easier🌠. Have fun!😎

python bash raspberry-pi security automation hacking hash cybersecurity penetration-testing exploits brute-force infosec pentesting usb-rubber-ducky threat-hunting hacking-tool threat-analysis threat-intelligence osint-resources webhacking

• Updated Mar 23, 2024
• Python

Raw data from Threat Intelligence Reports with automatic reports collection and keyword search across thousands of reports

apt threat-hunting malware-analysis malware-research threatintel threat-modeling cti threat-analysis threat-intelligence cyber-threat-intelligence malware-analysis-reports

• Updated Nov 10, 2026
• Python