misp 开源项目推荐（385 个）

MISP /MISP

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

TheHive-Project /TheHive

TheHive is a Cybersecurity Incident Response Management (CIRM) platform, now distributed commercially. Learn more on the official website:

eset /malware-ioc

Indicators of Compromises (IOC) of our various investigations

Bert-JanP /Hunting-Queries-Detection-Rules

KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

thalesgroup-cert /Watcher

Watcher - Open Source AI-powered Cyber Threat Intelligence & Hunting Platform. Developed with Django & React JS.

emalderson /ThePhish

ThePhish: an automated phishing email analysis tool

interplains /zero-breach

Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.

sroberts /awesome-iocs

Curated sources of indicators of compromise, detection signatures and IOC tools.

Bert-JanP /Open-Source-Threat-Intel-Feeds

该仓库包含开源且可自由使用的威胁情报信息源，无需额外需求即可使用。包含多种类型，如 IP、URL、CVE 和哈希。

pedramamini /ThreatIngestor

Extract and aggregate threat intelligence.

MISP /misp-warninglists

Warning lists to inform users of MISP about potential false-positives or other information in indicators

MISP /misp-galaxy

Clusters and elements to attach to MISP events or attributes (like threat actors)

OpenCTI-Platform /connectors

OpenCTI Connectors

MISP /PyMISP

Python library using the MISP Rest API

V1D1AN /S1EM

该项目是一体化的 SIEM，集成 SIRP 与威胁情报。

TheHive-Project /TheHiveDocs

Documentation of TheHive

cloudtracer /ThreatPinchLookup

Documentation and Sharing Repository for ThreatPinch Lookup Chrome & Firefox Extension

MISP /misp-modules

Modules for expansion services, enrichment, import and export in MISP and other tools.

MISP /misp-book

Everything about MISP

MISP /x_old_misp_docker

MISP Docker (XME edition)