MISP (core software) - Open Source Threat Intelligence and Sharing Platform
- misp
- threat-sharing
- threat-hunting
- threatintel
47,133 repositories indexed
1–9 of 9 · Most stars
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
Indicators of Compromises (IOC) of our various investigations
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
ThePhish: an automated phishing email analysis tool
Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.
Extract and aggregate threat intelligence.
Open detection-rule standard for AI agent security threats — like Sigma, but for AI agents. Executable, testable rules for prompt injection, tool poisoning, context exfiltration and MCP attacks. Merged into open-source projects at Microsoft, Cisco, Gen Digital, MISP and FINOS. MIT-licensed.
Create dataset for suricata with indicators of MISP instances and add sightings in MISP if an indicator of dataset generates an alert
Web browser based file manager for ESP32 in micropython