Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
awesome-iocs
A collection of sources of indicators of compromise.
https://github.com/sroberts/awesome-iocs
- 0x27/linux.mirai - Leaked Linux.Mirai Source Code for Research/IoC Development Purposes.
- Neo23x0/signature-base - Signature base for my scanner tools.
- aptnotes/data - APTnotes data.
- botherder/targetedthreats - Collection of IOCs related to targeting of civil society.
- circl/osint-feed - Open Source Intelligence for MISP.
- citizenlab/malware-indicators - Citizen Lab Malware Reports.
- da667/667s_Shitlist - Hi kids, do you like cyber violence? Wanna see me destroy evil in the blink of an eyelid?
- eset/malware-ioc - Indicators of Compromises (IOC) of our various investigations.
- fireeye/iocs - FireEye Publicly Shared Indicators of Compromise (IOCs).
- jasonmiacono/IOCs - Indicators of compromise for threat intelligence.
- makflwana/IOCs-in-CSV-format - The repository contains IOCs in CSV format for APT, Cyber Crimes, Malware and Trojan and whatever I found as part of hunting and research.
- nshc-threatrecon/IoC-List - NSHC ThreatRecon IoC Repository
- pan-unit42/iocs - Indicators from Unit 42 Public Reports.
- swisscom/detections - This repo contains threat intelligence information and threat detection indicators (IOC, IOA) shared by Swisscom CSIRT.
- Snort Downloads - Signatures for the Snort (& Suircata) Intrusion Detection System.
- kingtuna/Signatures - A mixture of snort and suricata signatures.
- 0pc0deFR/YaraRules - Multiple rules for yara-project for detect compiler/packer/protector.
- InQuest/yara-rules - A collection of Yara rules we wish to share with the world, most probably referenced from [http://blog.inquest.net](http://blog.inquest.net).
- OALabs/iocs - Machine-digestible malware indicators.
- Yara-Rules/rules - Repository of yara rules.
- advanced-threat-research/Yara-Rules - Repository of YARA rules made by McAfee ATR Team
- citizenlab/malware-signatures - Yara rules for malware families seen as part of targeted threats project.
- intezer/yara-rules - Yara rules from Intezer.
- kevthehermit/YaraRules - My Yara Rules Collection.
- reversinglabs/reversinglabs-yara-rules - ReversingLabs YARA Rules.
- x64dbg/yarasigs - Various Yara signatures (possibly to be included in a release later).
- InQuest/ThreatIngestor - Flexible framework for consuming threat intelligence.
- InQuest/iocextract - Advanced Indicator of Compromise (IOC) extractor.
- Neo23x0/yarGen - yarGen is a generator for YARA rules.
- mandiant/ioc_writer - Provide a python library that allows for basic creation and editing of OpenIOC objects.
- yahoo/PyIOCe - Python IOC Editor.
- ninoseki/mitaka - Browser extension to lookup IoCs/observables on many sources.
- MISP Malware Information Sharing Platform & Threat Sharing format - Specifications used in the MISP project including MISP core format.
- Mitre Cyber Observable eXpression (CybOX™) - This site contains archived CybOX documentation.
- Mitre Malware Attribute Enumeration and Characterization (MAEC™) - A schema for understanding malware.
- Mitre Structured Threat Information eXpression (STIX™) - A structured language for cyber threat intelligence.
- Yara - The pattern matching swiss knife for malware researchers (and everyone else).
- mandiant/OpenIOC_1.1 - This repository contains a revised schema, iocterms file, and other supporting documents which are the basis for a draft of a revised version of OpenIOC that we are calling OpenIOC 1.1.
Keywords
yara
8
ioc
5
malware-research
4
malware
4
threat-hunting
4
threat-intelligence
4
misp
3
indicators-of-compromise
3
yara-rules
3
dfir
2
threat-sharing
2
osint
2
malware-analysis
2
yara-signatures
2
analysis
1
signature
1
apt
1
detection
1
scanner
1
hash
1
anti-virus
1
mirai-source
1
mirai
1
malware-development
1
linux
1
leak
1
iot
1
ioc-development
1
botnet
1
technical-indicators
1
reverse-engineering
1
ransomware-prevention
1
ransomware-detection
1
malware-detection
1
standard
1
protocol
1
misp-taxonomy
1
misp-format
1
json-format
1
internet-draft
1
information-exchange
1
security
1
chrome-extension
1
python
1
malwareanalysis
1
threatintel
1
threat-intelligence-platform
1
threat-feeds
1
threat-analysis
1
soar
1