A deprecated threat intelligence platform for collecting, processing, and sharing security indicators.
CIFv2 (Collective Intelligence Framework version 2) is an open-source threat intelligence platform that collects, processes, and shares security indicators like IP addresses, domains, and malware hashes. It helps security teams aggregate data from multiple sources, normalize it for consistency, and enable automated threat response workflows. The framework is designed to improve collaboration and intelligence sharing across organizations.
Security operations teams, threat intelligence analysts, and organizations needing to manage and share indicators of compromise (IOCs) in a centralized system. It's particularly useful for those building internal threat intelligence platforms or integrating security data feeds.
Developers choose CIFv2 for its open-source approach to threat intelligence, allowing customization and self-hosting without vendor lock-in. It provides a collaborative framework for sharing security data across teams and tools, though it's now deprecated in favor of the updated CIFv3 version.
DEPRECATED - USE v3 (bearded-avenger)
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Enables threat intelligence sharing across organizations without vendor lock-in, aligning with its collaborative defense philosophy as stated in the README.
Aggregates and normalizes diverse indicators of compromise into a unified repository, ensuring consistent data processing for security workflows.
Supports customization through community contributions, allowing teams to build plugins for tailored integrations with security tools.
Facilitates automated response actions by integrating with security tools, enhancing operational efficiency in threat handling.
Officially superseded by CIFv3, meaning no new features, security patches, or active development, as warned in the README's end-of-life notice.
Built for Ubuntu14, which is end-of-life, leading to significant compatibility and security risks when deployed on modern infrastructures.
With focus shifted to CIFv3, community support is minimal, and known issues may remain unresolved, impacting reliability for production use.