Tools
MISP
MISP/MISP
An open-source threat intelligence sharing platform for collecting, storing, correlating, and distributing cybersecurity indicators and events. It supports STIX exchange, granular sharing groups, and integrations with SIEM and IDS tooling.
Topics
Related projects
SysmonTools1.7kA desktop toolkit for security analysts that imports, correlates, and visualizes Microsoft Sysmon logs. It offers interactive process-session diagrams, geo maps, event search, and VirusTotal lookups for threat hunting and DFIR.
Watcher1.4kWatcher is an AI-powered cyber threat intelligence and hunting platform that aggregates CVEs, ransomware, leak data and domain monitoring, with AI-generated threat summaries.
radare225.4kA libre reverse engineering framework and command-line toolset for analyzing, disassembling, debugging, and patching binaries across many architectures and formats.
spiderfoot24.4kAn open-source OSINT automation tool with over 200 modules for reconnaissance, threat intelligence and attack-surface mapping.
suricata6.8kSuricata is an open-source network IDS, IPS, and security monitoring engine developed by the OISF, designed for high-performance analysis of live network traffic.
retoolkit5.3kretoolkit is an installer that bundles a curated set of reverse engineering and malware analysis tools for Windows. It preconfigures utilities like x64dbg to speed up setting up an analysis VM.