Defanged Indicator of Compromise (IOC) Extractor.
Principalele funcționalități ale inquest/python-iocextract sunt: Threat Intelligence, Development And Analysis Tools, Threat Analysis Tools.
Alternativele open-source pentru inquest/python-iocextract includ: inquest/threatingestor — Extract and aggregate threat intelligence. yeti-platform/yeti — Your Everyday Threat Intelligence. neo23x0/yargen — yarGen is a generator for YARA rules. misp/misp — MISP is an open-source threat intelligence sharing platform designed for collecting, storing, and distributing… alienvault-otx/yabin — A Yara rule generator for finding related samples and hunting. abusesa/abusehelper — A framework for receiving and redistributing abuse feeds.
MISP is an open-source threat intelligence sharing platform designed for collecting, storing, and distributing structured threat indicators and intelligence. At its core, it provides a distributed synchronization protocol for transferring events between instances, an attribute-based correlation engine that links matching indicators across events, and a REST API with an OpenAPI specification for programmatic access to threat data. The platform uses formal data formats for JSON, taxonomy, galaxy, and object templates to enable compatibility across tools and communities. The platform distinguish
