threatintelligence 话题在 GitHub 上没有填写简介，这里按 Star 数汇总最相关的热门仓库。
Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.
Threat Pursuit Virtual Machine (VM): A fully customizable, open-sourced Windows-based distribution focused on threat intelligence analysis and hunting designed for intel and malware analysts as well as threat hunters to get up and running quickly.
Actionable analytics designed to combat threats
该存储库包含我们各项调查的入侵指标（IOC）。
从各种网络犯罪来源和论坛中收集的情报和用户名的集合和列表。DarkForums、HackForums、Patched、Cracked、BreachForums、OGuser、XSS、Dread等
关于Log4Shell及其利用活动的情报收集。
A platform for threat intelligence and brand monitoring, dark web intelligence, OSINT, and more.
This little tool is to calculate a MurmurHash value of a favicon to hunt phishing websites on the Shodan platform.
BlackBerry Threat Research & Intelligence
A reverse search tool for OSINT (Open Source Intelligence) gathering & facial recognition via Google Custom Search & Google Vision API's.
Interactive Threat Intelligence Bot that leverages serverless framework, AWS/GCP, and Slack
Tempolocus is a time-series activity patterns and approximate location inference
Utilizing your Threat data from a MISP instance into CarbonBlack Response by exposing the data in the Threat Intelligence Feed.
Threat Feeds, Threat lists, and regular lists of known IP ranges and domains. It updates every 4 hours.
A BASH script to automate simple tasks related to static malware analysis
A new way for you to structure your threat content.
A collection of Go tools I make while I learn a little about GoLang.
Publicly available threat intelligence reports
NGSOTI
The Telegram channel monitor with a full UI: pulls Telegram channel messages, translates them, and preserves images and video.