All tags
Catalogue tag

#threat-intelligence

Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.

23 records
Tagged “threat-intelligence”Ranked by health index
PyPI · npm
99Exceptionalhealth index
OpenCTI-Platform/opencti
Open Cyber Threat Intelligence Platform
TypeScript · JavaScript★ 9,861↓ 2.6M/moAug 28, 2026
Custom licenseAug 28, 2026 · metrics 2.10.0
Packagist · PyPI
97Exceptionalhealth index
MISP/MISP
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
PHP · JavaScript★ 6,490Aug 28, 2026
AGPL-3.0Aug 28, 2026 · metrics 2.10.0
PyPI
96Exceptionalhealth index
blacklanternsecurity/bbot
The recursive internet scanner for hackers. 🧡
Python★ 10.3K↓ 34.4K/moAug 11, 2026
AGPL-3.0Aug 11, 2026 · metrics 2.10.0
PyPI
88Excellenthealth index
MISP/misp-modules
Modules for expansion services, enrichment, import and export in MISP and other tools.
Python★ 374↓ 800/moJul 27, 2026
AGPL-3.0Jul 27, 2026 · metrics 2.10.0
Go · npm
88Excellenthealth index
beenuar/AiSOC
Open-source AI-powered Security Operations Center — alert fusion, purple-team drills, agent-assisted triage, MITRE ATT&CK investigation. MIT-licensed, self-hostable.
Python · TypeScript★ 2,367Sep 5, 2026
MITSep 5, 2026 · metrics 2.10.0
PyPI
86Excellenthealth index
kaifcodec/user-scanner
🕵️‍♂️ (2-in-1) Email & Username OSINT suite for deep data extraction. Analyzes 310+ scan vectors (120+ email / 190+ username) for security research, investigations, and digital footprinting.
Python★ 2,718↓ 19.2K/moJul 16, 2026
MITJul 16, 2026 · metrics 2.10.0
Go · Maven · npm
86Excellenthealth index
utmstack/UTMStack
Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.
TypeScript · Java · HTML★ 580Jul 30, 2026
AGPL-3.0Jul 30, 2026 · metrics 2.10.0
npm · PyPI
84Excellenthealth index
DNSZLSK/muad-dib
Real-time npm/PyPI supply-chain threat detection. Behavioral chain analysis, AST scanning, IOC feeds, and compound scoring engine.
JavaScript★ 15↓ 7,189/moAug 22, 2026
AGPL-3.0Aug 22, 2026 · metrics 2.10.0
Go
84Excellenthealth index
tbckr/trident
CLI tool for OSINT investigations
Go★ 3Aug 6, 2026
GPL-3.0Aug 6, 2026 · metrics 2.10.0
PyPI
81Excellenthealth index
depalmar/ai_for_the_win
Build AI-powered security tools. 50+ hands-on labs covering ML, LLMs, RAG, threat detection, DFIR, and red teaming. Includes Colab notebooks, Docker environment, and CTF challenges.
Python · Jupyter Notebook★ 157Aug 4, 2026
Custom licenseAug 4, 2026 · metrics 2.10.0
crates.io
81Excellenthealth index
gen0sec/synapse
Active NDR solution with eBPF-powered active fingerprint blocking, firewall and proxy. Protect your system -- east-west and north-south.
Rust★ 166Aug 4, 2026
Custom licenseAug 4, 2026 · metrics 2.10.0
crates.io · npm
77Goodhealth index
backbay-labs/clawdstrike
AI EDR for developer workstations and autonomous agent fleets. Build Swarm Detection & Response platforms with Clawdstrike.
TypeScript · Rust★ 285Aug 4, 2026
Apache-2.0Aug 4, 2026 · metrics 2.10.0
npm
75Goodhealth index
panguard-ai/panguard-ai
Open-source security platform for AI agents -- audits skills before install, monitors 24/7, shares threat intelligence across all users. | AI Agent 開源安全平台 -- 安裝前審計 skill、24/7 即時監控、社群共享威脅情報。
TypeScript★ 63↓ 1,214/moSep 5, 2026
MITSep 5, 2026 · metrics 2.10.0
—
69Goodhealth index
mukul975/Anthropic-Cybersecurity-Skills
817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0
Python★ 27.3KAug 5, 2026
Apache-2.0Aug 5, 2026 · metrics 2.10.0
Go · PyPI
65Goodhealth index
wolffcatskyy/crowdsec-unifi-bouncer
Install and persist the official CrowdSec firewall bouncer on UniFi OS devices (UDM, UDM SE, UDR) with automatic recovery from firmware updates
Go · Shell★ 39Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
Go
47Weakhealth index
r-smith/deceptifeed
Honeypot servers with an integrated threat feed
Go · HTML★ 136Jul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
PyPI
39Weakhealth index
osintph/falconeye
Free self-hosted OSINT investigator's toolkit. Twelve tools in one: crypto tracing, phishing fingerprinting, domain intel, Telegram OSINT, IP reputation, email header forensics with LLM scam detection, Google dork generator, script deobfuscator. AGPL-3.0.
Python · JavaScript · HTML★ 10Aug 5, 2026
AGPL-3.0Aug 5, 2026 · metrics 2.10.0
npm
31At Riskhealth index
OjasKord/url-safety-validator-mcp
AI-powered URL safety validator MCP server. SAFE/SUSPICIOUS/DANGEROUS verdict for agents.
JavaScript★ 1↓ 2,659/moJul 19, 2026
MITJul 19, 2026 · metrics 2.10.0
PyPI
31At Riskhealth index
anyrun/anyrun-sdk
Simplify integration with ANY.RUN REST API services
Python★ 13↓ 22.5K/moAug 29, 2026
Apache-2.0Aug 29, 2026 · metrics 2.10.0
Go
29At Riskhealth index
syswraith/heimdall
Fast, concurrent username OSINT tool in Go — checks presence across sites via HTTP, JSON, headless browser, and OpenGraph parsing, with SQLite caching and YAML-driven site configs.
Go★ 0Jul 24, 2026
AGPL-3.0Jul 24, 2026 · metrics 2.10.0
—
20At Riskhealth index
mthcht/ThreatHunting-Keywords
Awesome list of keywords and artifacts for Threat Hunting sessions
PowerShell · HTML · Python★ 669Aug 4, 2026
No licenseAug 4, 2026 · metrics 2.10.0