Open Cyber Threat Intelligence Platform

Collection of Cyber Threat Intelligence sources from the deep and dark web

Cyber Threat Intelligence Repository expressed in STIX 2.0

Watcher - Open Source AI-powered Cyber Threat Intelligence & Hunting Platform. Developed with Django & React JS.

Open source platform for cyber security analysts with many features for threat intelligence and detection engineering.

Public Repository of Open Source Tools for Cyber Threat Intelligence Analysts and Researchers

A collection of papers, blogs, and resources that make up the quintessential aspects of cyber threat intelligence

TRAM is an open-source platform designed to advance research into automating the mapping of cyber threat intelligence reports to MITRE ATT&CK®.

CRADLE is a collaborative platform for Cyber Threat Intelligence analysts. It streamlines threat investigations with integrated note-taking, automated data linking, interactive visualizations, and robust access control. Enhance your CTI workflow from analysis to reporting—all in one secure space.

CTI Blueprints is a free suite of templates and tools that helps Cyber Threat Intelligence analysts create high-quality, actionable reports more consistently and efficiently.

An analytical challenge created to test junior analysts looking to try performing proactive and reactive cyber threat intelligence.

AttacKG: Constructing Knowledge-enhanced Attack Graphs from Cyber Threat Intelligence Reports

EXIST is a web application for aggregating and analyzing cyber threat intelligence.

Threatelligence is a simple cyber threat intelligence feed collector, using Elasticsearch, Kibana and Python to automatically collect intelligence from custom or public sources. Automatically updates feeds and tries to further enhance data for dashboards.

CTI Cyber Threat Intelligence OSINT Dark Web Deep Web Research. Ransomware gang information gathering tool.

The LOLBins CTI-Driven (Living-Off-the-Land Binaries Cyber Threat Intelligence Driven) is a project that aims to help cyber defenders understand how LOLBin binaries are used by threat actors during an intrusion in a graphical and digestible format for the TIPs platform using the STIX format.

This guide describes a process for developing Cyber Threat Intelligence Priority Intelligence Requirements

Cyber Security concepts extracted from unstructured threat intelligence reports using Named Entity Recognition

Cyber Threat Intelligence Data, Indicators, and Analysis

An OSINT tool tailored for comprehensive collection, analysis, and interpretation of cyber threat intelligence from Telegram channels and groups.

OASIS Cyber Threat Intelligence (CTI) TC: A repository for commonly used STIX objects in order to avoid needless duplication. https://github.com/oasis-open/cti-stix-common-objects

Cyber Threat Intelligence Feeds

Cybercrime forums for Cyber Threat Intelligence purpose

[NeurIPS'24, Spotlight] CTIBench: A Benchmark for Evaluating LLMs in Cyber Threat Intelligence

Cyber Threat Intelligence

CTINexus is a framework that leverages optimized in-context learning of LLMs to enable data-efficient extraction of cyber threat intelligence and the construction of high-quality cybersecurity knowledge graphs.

Replication package for the paper "Automatic Mapping of Unstructured Cyber Threat Intelligence: An Experimental Study" published at the IEEE International Symposium on Software Reliability Engineering (ISSRE) 2022

An ongoing & curated collection of awesome software best practices and remediation techniques, libraries and frameworks, E-books and videos, Technical guidelines and important resources about Threat Intelligence.

Random Cyber Threat Intelligence

Cyber Threat Intelligence - Toolbox