This project is a SIEM with SIRP and Threat Intel, all in one.

🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.

A highly available AWS deployment of the Threat Intelligence platform, OpenCTI using Terraform. Native AWS resources are used where feasible.

Maltego local and server integration for OpenCTI

Helm chart for Open Cyber Threat Intelligence Platform

🦊 DISINFOX is a threat intelligence exchange platform for disinformation implementing the DISARM framework at its core.

Wazuh extension looking up alert data against indicators in OpenCTI threat intel

OpenCTI–Wazuh connector looking for indicators in Wazuh and creating sightings

A repository dedicated to deliver a comprehensive set of tools for integration and convenient use of Kaspersky Threat Intelligence services

Watcher is a solution that integrates with security products using IoC (Indicator of Compromise) information gathered through the OpenCTI platform. This integration makes it possible to detect and respond to threats faster.

Unofficial OpenCTI Golang Client

IgniteGraph is a client layer for using Apache Ignite as a graph database. It is an implementation of the Apache TinkerPop interfaces.

This project complements Apache Spark structured streaming with hand-picked streaming sources and sinks.

docker-compose configuration to install OpenCTI with connectors (check my blog post for more information)

Cyber Defense Plattform for security incident investigation enrichment and automatisation.

A Prometheus exporter for OpenCTI

An installation guide to help install OpenCTI, MISP and CAPE Sandbox but also to interconnect them

This project complements Apache Spark Streaming with hand-picked streaming receivers for Eclipse Ditto, Fiware Context Broker, Fleet (DM), Eclipse Paho, HiveMQ, OpenCTI, Google PubSub, Server Sent Events, ThingsBoard and Zeek Sensor.

Welcome to my Cybersecurity Homelab, where I experiment with ethical hacking, penetration testing, network security, AI Agent automation and system hardening. This repo documents the architecture, software stack, configurations, and automation scripts used in my self-hosted cybersecurity lab.

A collection of standalone Akka-based Http(s) services to connect to Fiware, OpenCTI, Osquery fleets, OPC-UA, ThingsBoard and Zeek.