Open Source Threat Intelligence

• Combine – Tool to gather Threat Intelligence indicators from publicly available sources.
• IOC Editor – A free editor for XML IOC files, from Mandiant.
• ioc_writer – Python library for working with OpenIOC objects, from Mandiant.
• MISP – Malware Information Sharing Platform.
• threataggregator – Aggregates security threats from a number of sources, including some of those listed below in other resources.
• TIQ-test – Data visualization and statistical analysis of Threat Intelligence feeds.