MISP (core software) - Open Source Threat Intelligence and Sharing Platform
- misp
- threat-sharing
- threat-hunting
- threatintel
47,133 repositories indexed
1–8 of 8 · Most stars
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.
OASIS TC Open Repository: Python APIs for STIX 2
Investigate suspicious activity by visualizing Sysmon's event log
A simple Elasticsearch REST client written in Elixir.
Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents
Self-hosted AI-assisted CTI-to-detection workbench for ATT&CK mapping, IOC/CVE intelligence, Threat Radar, malware triage, Attack Simulation, and SIEM validation.
A Vert.x TCP EventBus client for Smalltalk