Malwoverview is a first response tool used for downloading and screening malware samples, suspicious URLs, IP address, domains. Malwoverview offers threat hunting information from Virus Total, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, ThreatCrowd, Valhalla and it is able to scan Android devices against VT and HA.

Actionable analytics designed to combat threats

🔮 Visibility Across Space and Time

Detecting ATT&CK techniques & tactics for Linux

A robust, and flexible open source User & Entity Behavior Analytics (UEBA) framework used for Security Analytics. Developed with luv by Data Scientists & Security Analysts from the Cyber Security Industry. [PRE-ALPHA]

The FASTEST way to consume threat intel.

Collection of Dashboards for Threat Hunting and more!

Detect leaks in security event logs.

Library of threat hunts to get any user started!

Lightweight Endpoint Detection & Response (EDR) Framework

Pull your DS rules and build a ATT&CK matrix

Extract logs based off events from sysmon. Comes as a package, cli and ui.

Presentations

Another Threat Hunting knowledge base :) based on MITRE ATT&CK Matrix

CIFv5 SDK (beta- only works with CIFv5)

frontend, model registry, model search, and model marketplace for OpenUBA