Starter project to start developing a CTI plugin in TypeScript

Cyber Intelligence Tool

This script searches messages containing specified search terms in Telegram channels the user is a member of. Saves the results into a file. Then uploads the file and sends an alert to a Slack channel.

A static HTML page for quick OSINT pivoting.

T-Pot Attack Map that follows ES honeypot events within T-Pot and parses IPs, ports and honeypot info to visualize events in real time.

JARM fingerprinting in native Rust

network security monitoring NIDS HIDS CTI DFIR

My dissertation has as its content the collection of CTI data from multiple sources, the conversion of this data into STIX2 format, their entry into a database, their analysis in terms of quality criteria, and finally their classification into basic categories of cyber threats and stages of Kill Chain(KC).

An index page to all of the homework from the university on this account.

The Intelligence Analyst's Workstation

CTI Reporter is a small flask wiki to help index threat intelligence data

TLP:White CTI Feeds

Python scripts to query ATT&CK dataset with STIX2

A guide for how to configure a M365 tenant as a research honeypot

Intrusion Detection in Cloud Productivity Environments (2024)

This repository contains a custom USD generic listener to handle or customize the inbound/incoming calls from the CTI

Export livehunt rulesets and rules from your VirusTotal account to your local filesystem

Telegram channels monitoring

Observables analysis and enrichment for Colander