59 Open Source Cti Software Projects

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

Open Cyber Threat Intelligence Platform

Web app that provides basic navigation and annotation of ATT&CK matrices

Cyber Threat Intelligence Repository expressed in STIX 2.0

MITRE ATT&CK Website

The work on GreuhZbugs Liberation Mission for Arma 3 continues...

OASIS TC Open Repository: Python APIs for STIX 2

Scripts and a (future) library to improve users' interactions with the ATT&CK content

TAXII server implementation in Python from EclecticIQ

Battle proven FreeSWITCH Event Socket Protocol client implementation with Gevent

TAXII client implementation from EclecticIQ

OASIS TC Open Repository: TAXII 2 Client Library Written in Python

OASIS TC Open Repository: Lightweight visualization for STIX 2.0 objects and relationships

OASIS TC Open Repository: Non-normative schemas and examples for STIX 2

OASIS TC Open Repository: GitHub Pages site for STIX and TAXII

OASIS TC Open Repository: TAXII 2 Server Library Written in Python

OpenCTI connectors

Data exfiltration utility for testing detection capabilities

ATT&CK Evaluations website (DEPRECATED)

Modification of BECTI made by zerty for the JMW Arma 3 server

OASIS Cyber Threat Intelligence (CTI) TC Open Repository: Convert STIX 1.2 XML to STIX 2.x JSON

Graph Representation of MITRE ATT&CK's CTI data

Seamless Threat Intelligence Platform

SDK and command line utility for enumerate leaked credentials on the wild.

OASIS TC Open Repository: Validator for STIX 2.0 JSON normative requirements and best practices

STIX 2.x Java Library

:phone: UC micro service for Wazo

ICTCore: Unified Communications Framework for CTI

STIX2 graph visualisation library in JS

OpenCTI Python client

STIX2 graph widget for Jupyter notebooks, powered by stixview library

OASIS TC Open Repository: Validate patterns used to express cyber observable content in STIX Indicators

OASIS TC Open Repository: The repository cti-stix-slider supports development of a Python application to convert STIX 2.0 content to STIX 1.x content

Supporting material for my presentation "Adversarial Threat Modelling — A Practical Approach to Purple Teaming in the Enterprise"

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

Collection of Cyber Threat Intelligence sources from the deep and dark web

Security control framework mappings to MITRE ATT&CK provide a critically important resource for organizations to assess their security control coverage against real-world threats and provide a bridge for integrating ATT&CK-based threat information into the risk management process.

Free, easy to setup PBX for small business based on Asterisk 16 core

A python module for working with ATT&CK

Dictionary of CTI-related acronyms, terms, and jargon

Public Repository of Open Source Tools for Cyber Threat Intelligence Analysts and Researchers

Further investigation in to APT campaigns disclosed by private security firms and security agencies

STIX data representing MITRE ATT&CK

This repository contains analysis scripts, YARA rules, and additional IoCs related to our Telekom Security blog posts.

CyCAT.org API back-end server including crawlers

OASIS Cyber Threat Intelligence (CTI) TC: A tool for generating STIX content for prototyping and testing. https://github.com/oasis-open/cti-stix-generator

Track progress and keep notes while working through @likethecoins CTI Self Study Plan

stix-icons is a collection of colourful and clean icons for use in software, training and marketing material to visualize cyber threats according to the STIX language for intelligence exchange, defined by OASIS Cyber Threat Intelligence (CTI) TC

Threat Box Assessment Tool

MITRE Shield website

Python SDK for Cisco IP Phones using CTI (Computer Telephony Integration)

TAXII Server supporting the 2.1 spec.

Welcome to the SEKOIA.IO Community repository!

Learn how to get more out of publicly available threat reports to help improve the security posture of your organization! TLP: White Threat Reports used in the making of this Panel.

ATT&CK Evaluations Website

A visualized overview of the Initial Access Broker (IAB) cybercrime landscape

Cloud, CDN, and marketing services leveraged by cybercriminals and APT groups

A collection of intelligence about Log4Shell and its exploitation activity.

Knowledge Graph for Cyber Threat Intelligence with TypeDB