Awesome IOCs

An awesome collection of indicators of compromise (and a few IOC related tools).

IOCs

Indicators

• 0x27/linux.mirai
• botherder/targetedthreats
• circl/osint-feed
• citizenlab/malware-indicators
• da667/667s_Shitlist
• eset/malware-ioc
• fireeye/iocs
• jasonmiacono/IOCs
• makflwana/IOCs-in-CSV-format
• Neo23x0/signature-base
• pan-unit42/iocs

Snort Signatures

• Snort Downloads
• kingtuna/Signatures

Yara Signatures

• 0pc0deFR/YaraRules
• citizenlab/malware-signatures
• kevthehermit/YaraRules
• OALabs/iocs
• sysforensics/YaraRules
• x64dbg/yarasigs
• Yara-Rules/rules

Tools

IOC Tools

• yahoo/PyIOCe
• mandiant/ioc_writer
• Neo23x0/yarGen

IOC Formats

• mandiant/OpenIOC_1.1
• MISP Malware Information Sharing Platform & Threat Sharing format
• Mitre Cyber Observable eXpression (CybOX™)
• Mitre Malware Attribute Enumeration and Characterization (MAEC™)
• Mitre Structured Threat Information eXpression (STIX™)
• Yara