Malwoverview is a first response tool used for threat hunting and offers intel information from Virus Total, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, InQuest and it is able to scan Android devices against VT.

Actionable analytics designed to combat threats

This repository contains indicators of compromise (IOCs) of our various investigations.

A collection of intelligence about Log4Shell and its exploitation activity.

This little tool is to calculate a MurmurHash value of a favicon to hunt phishing websites on the Shodan platform.

A reverse search tool for OSINT (Open Source Intelligence) gathering & facial recognition via Google Custom Search & Google Vision API's.

Interactive Threat Intelligence Bot that leverages serverless framework, AWS/GCP, and Slack

Utilizing your Threat data from a MISP instance into CarbonBlack Response by exposing the data in the Threat Intelligence Feed.

Repositório criado para compartilhar ferramentas utilizadas para caça a ameaças (CTI) sobre atores de ameaças e enriquecimento de IOCs coletadas destes.

A Storm service that facilitates Yara scanning from a Synapse Cortex

Enhancing MISP (Malware Information Sharing Platform & Threat Sharing)

ttpnav is a Python library that simplifies navigating MITRE ATT&CK data, enabling users to effortlessly retrieve comprehensive information about specific techniques with a single query. It provides details on mitigations, detections, procedure examples, groups, and related software/tools, streamlining cybersecurity analysis.