Threatintel

MISPPHP

An open-source platform for collecting, storing, sharing, and acting upon cybersecurity threat intelligence and indicators.

sysmon-config

A high-quality, commented Sysmon configuration template for Windows system monitoring and incident investigation.

YETIPython

A forensics intelligence platform that bridges CTI and DFIR by storing threat intelligence and enabling bulk observable searches and threat-focused analysis.

phishing_catcherPython

A Python tool that catches potential phishing domains in near real-time by analyzing suspicious TLS certificate issuances via CertStream.