Rapid7-Labs

cluster25/detection13

Threat detection rules

A collection of threat detection rules written in YARA

advanced-threat-research/yara-rules573

Malware detector rules

A collection of rules to detect and prevent malware infections using YARA-based threat intelligence

sk4la/plast17

Threat detection framework

A modular threat-hunting tool framework for detecting indicators of compromise in incident-response operations.

strangerealintel/dailyioc312

Threat intel collector

Automated threat intelligence collection from articles and tweets, utilizing YARA patterns

kasperskylab/klara698

Malware scanner

Helps Threat Intelligence researchers hunt for new malware by efficiently scanning large collections of files with Yara rules

threathuntingproject/threathunting1.7K

Threat detection resource

An informational repository providing resources and knowledge for detecting adversaries in IT environments.

aptnotes/data1.7K

Threat intel repository

A repository of publicly-available papers and blogs related to malicious campaigns and APT groups, providing a centralized location for tracking and summarizing threat intelligence data.

a3sal0n/cyberthreathunting861

Threat Hunting Platform

A collection of tools and resources for threat hunters to identify and respond to cyber threats.

datadog/threatest322

Threat tester

Tools for testing and verifying threat detection rules

securitymagic/yara11

Malware detection rules

A collection of YARA rules for detecting malware and suspicious activity in various environments.

inquest/threatingestor836

Threat Scanner

Extracts and aggregates threat intelligence from various sources

inodee/threathunting-spl268

Splunk query library

Provides Splunk code and prototypes for building rules and queries to detect malicious activity

threatexpress/red-team-scripts1.1K

System scanner

A collection of tools and scripts used by red teamers to gather information about compromised systems.

svdwi/bluebox39

Threat analyzer

Analyzes and enriches threat intelligence data from various sources to help detect malicious files, URLs, and domains.

yelp/threat_intel275

Threat intel API

Provides APIs for threat intelligence data from Umbrella Investigate and other sources