misp

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

TheHive is a Collaborative Case Management Platform, now distributed as a commercial version

Indicators of Compromises (IOC) of our various investigations

KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

Watcher - Open Source AI-powered Cyber Threat Intelligence & Hunting Platform. Developed with Django & React JS.

ThePhish: an automated phishing email analysis tool

This repository contains Open Source freely usable Threat Intel feeds that can be used without additional requirements. Contains multiple types such as IP, URL, CVE and Hash.

Extract and aggregate threat intelligence.

Warning lists to inform users of MISP about potential false-positives or other information in indicators

Clusters and elements to attach to MISP events or attributes (like threat actors)

OpenCTI Connectors

Python library using the MISP Rest API

This project is a SIEM with SIRP and Threat Intel, all in one.

Documentation of TheHive

Documentation and Sharing Repository for ThreatPinch Lookup Chrome & Firefox Extension

Modules for expansion services, enrichment, import and export in MISP and other tools.

User guide of MISP

MISP Docker (XME edition)

🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.

MISP Playbooks