misp-galaxy

Threat Intelligence Hub

A platform to integrate and share threat intelligence clusters and vocabularies with MISP threat intelligence platform

Clusters and elements to attach to MISP events or attributes (like threat actors)

GitHub

534 stars
48 watching
259 forks
Language: Python
last commit: almost 2 years ago
adversariesadversary-groupsattack-patternonclassificationinformation-exchangemalwaremispmisp-galaxymitre-adversarial-tacticsstixthreat-actorsthreat-huntingthreat-intelligence

Related projects:

RepositoryDescriptionStars
misp/misp-modulesProvides an API and extension mechanism for MISP threat intelligence platforms.349
misp/misp-maltegoAn integration tool for Maltego to leverage MISP threat intelligence and the MITRE ATT&CK dataset171
misp/misp-trainingTraining materials and source code for threat intelligence, information sharing, and MISP software development.391
davidonzo/threat-intelDevelops and shares cyber threat intelligence information in various formats for SOC/CSIRT/CERT use.149
misp/pymispA Python library to access and manipulate data from MISP platforms via their REST API448
yelp/threat_intelProvides APIs for threat intelligence data from Umbrella Investigate and other sources275
misp/misp-workbenchToolset for analyzing and correlating threat intelligence data from various sources.28
misp/misp-rfcDefines and maintains standards for information exchange in threat intelligence platforms47
ch33r10/bluespace2021A collection of resources and training materials focused on threat hunting and cyber-threat intelligence.13
inquest/threatingestorExtracts and aggregates threat intelligence from various sources836
misp/misp-taxonomiesA Python application that provides a standardized set of classification libraries to tag, classify, and organize security-related information.266
matamorphosis/scrummageA platform for searching and analyzing publicly available online data to detect potential security threats515
criticalpathsecurity/zeek-intelligence-feedsProvides real-time threat intelligence feeds to enhance network security monitoring and analysis.346
intelowlproject/intelowlA tool for managing and analyzing threat intelligence data at scale.3,888
misp/mispA platform for collecting, storing, and sharing structured information about cyber security incidents and threats.5,435