MalPipe
A modular malware and IOC ingestion framework that collects, enriches, and exports threat intelligence from multiple feeds.
What is MalPipe?
MalPipe is a modular malware and indicator of compromise (IOC) collection and processing framework. It automates the ingestion of threat data from multiple feeds like VirusTotal and MalShare, enriches it with additional context (e.g., YARA scanning, DNS resolution), and exports the results for security analysis. It solves the problem of manually aggregating and processing disparate threat intelligence sources.
Security analysts, threat intelligence teams, and SOC engineers who need to automate the collection and enrichment of IOCs and malware samples from open-source feeds.
Developers choose MalPipe for its modular, extensible architecture that allows custom pipelines, its support for multiple threat feeds out of the box, and its ability to integrate enrichment processors like YARA scanning and DNS lookups without relying on proprietary platforms.
Overview
Malware/IOC ingestion and processing engine
Use Cases
Best For
- Automating IOC collection from multiple OSINT threat feeds
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
