All

47 repositories

obstracts
Public
Turn any blog into structured threat intelligence.
atom blog rss
atom blog rss threat-hunting threat-intelligence threat-intel
Python
•
Apache License 2.0
•4•58•1•0•Updated Jun 19, 2026Jun 19, 2026
ctibutler
Public
A web API for various cyber threat intelligence frameworks, including MITRE ATT&CK, CWE, ATLAS...
stix tlp mitre-attack
stix tlp mitre-attack stix2 stix2-extensions mitre-atlas mitre-cwe mitre-capec
Python
•
Apache License 2.0
•2•20•1•2•Updated Jun 19, 2026Jun 19, 2026
opencti-connectors
Public
OpenCTI Connectors
Python
•
Apache License 2.0
•598•0•0•44•Updated Jun 19, 2026Jun 19, 2026
cloak2stix
Public
cloak2stix is a small exporter that clones the upstream CLOAK repository,
stix stix2
stix stix2
Python
•0•0•1•0•Updated Jun 19, 2026Jun 19, 2026
stixify
Public
Extract machine readable cyber threat intelligence from unstructured data (inc. PDFs, Word docs, and HTML pages)
stix2 stix2-extensions stix2-patterns
stix2 stix2-extensions stix2-patterns
Python
•
Apache License 2.0
•4•40•0•0•Updated Jun 19, 2026Jun 19, 2026
stix4doge
Public
This repository is used to generate STIX objects used by DOGESEC products.
cyber-threat-intelligence stix2 stix2-extensions
cyber-threat-intelligence stix2 stix2-extensions
Python
•
Apache License 2.0
•0•2•0•0•Updated Jun 17, 2026Jun 17, 2026
cyberthreatexchange
Public
Python
•
Apache License 2.0
•0•1•0•5•Updated Jun 17, 2026Jun 17, 2026
siemrules
Public
An API that takes a txt file containing threat intelligence and turns it into a detection rule.
siem soar detection-rules
siem soar detection-rules detection-engineering
Python
•
Apache License 2.0
•3•4•2•0•Updated Jun 17, 2026Jun 17, 2026
vulmatch
Public
Vulmatch is a database of CVEs in STIX 2.1 format with a REST API wrapper to access them.
vulnerability vulnerabilities cve
vulnerability vulnerabilities cve cpe nvd
Python
•
Apache License 2.0
•2•10•0•0•Updated Jun 17, 2026Jun 17, 2026
dogesec_commons
Public
A package containing views we reuse between various dogesec products
Python
•
Apache License 2.0
•0•1•1•0•Updated Jun 17, 2026Jun 17, 2026
txt2detection
Public
A command line tool that takes a txt file containing threat intelligence and turns it into a detection rule.
siem detection-rules detection-engineering
siem detection-rules detection-engineering
Python
•
Apache License 2.0
•1•8•1•3•Updated Jun 17, 2026Jun 17, 2026
history4feed
Public
Creates a complete full text historical archive for an RSS or ATOM feed.
atom rss wayback-machine
atom rss wayback-machine
Python
•
Apache License 2.0
•5•136•0•1•Updated Jun 16, 2026Jun 16, 2026
arango_taxii_server
Public
A lightweight TAXII API wrapper for ArangoDB.
arangodb taxii2 stix2
arangodb taxii2 stix2
Python
•
Apache License 2.0
•0•8•0•0•Updated Jun 16, 2026Jun 16, 2026
feeds2stix
Public
A set of scripts that take data from threat intelligence feeds and converts it into STIX 2.1 objects.
threat-intelligence stix2
threat-intelligence stix2
Python
•
Apache License 2.0
•1•7•3•0•Updated Jun 16, 2026Jun 16, 2026
ransomware2stix
Public
STIX 2.1 bundles of ransomware group intelligence
malware ransomware ransom
malware ransomware ransom
Python
•
Apache License 2.0
•0•1•0•1•Updated Jun 16, 2026Jun 16, 2026
arango_cti_processor
Public
A small script that creates relationships between common CTI knowledge-bases in STIX 2.1 format.
cwe capec mitre-attack
cwe capec mitre-attack stix2
Python
•
Apache License 2.0
•1•7•0•2•Updated Jun 16, 2026Jun 16, 2026
arango_cve_processor
Public
A small python script that enriches Vulnerability STIX Objects with other intel
vulnerability cve cpe
vulnerability cve cpe nvd cwe capec mitre-attack stix2
Python
•
Apache License 2.0
•0•2•0•2•Updated Jun 16, 2026Jun 16, 2026
stix2arango
Public
stix2arango is a command line tool that takes a group of STIX 2.1 objects in a bundle and inserts them into ArangoDB. It can also handle updates to existing obj…
arangodb stix2
arangodb stix2
Python
•
Apache License 2.0
•1•10•1•1•Updated Jun 16, 2026Jun 16, 2026
sitemap2posts
Public
sitemap2posts is designed to identify all posts for a blog, using a specified URL path, along with titles and published dates, ready to be added to history4feed…
blog crawler robots-txt
blog crawler robots-txt
Python
•
Apache License 2.0
•0•1•0•0•Updated Jun 15, 2026Jun 15, 2026
stixify_chrome_extension
Public
Submit webpages to Stixify to convert into structured threat intelligence.
Vue
•
Apache License 2.0
•0•0•0•1•Updated Jun 13, 2026Jun 13, 2026
cve2stix
Public
A command line tool that turns NVD CVE records into STIX 2.1 Objects.
vulnerability stix cve
vulnerability stix cve nvd stix2 opencti stix2-patterns
Python
•
Apache License 2.0
•1•11•0•0•Updated Jun 12, 2026Jun 12, 2026
awesome_threat_intel_blogs
Public
A curated list of Awesome Threat Intelligence Blogs
atom rss cybersecurity
atom rss cybersecurity infosec threat-intelligence threat-intel
Other
•73•548•0•0•Updated Jun 12, 2026Jun 12, 2026
sigmahq2siemrules
Public
A GitHub Action-based uploader that automatically syncs Sigma detection rules from the SigmaHQ repository to the SIEM Rules.
Python
•0•0•0•0•Updated Jun 11, 2026Jun 11, 2026
stixviewer
Public
STIX2 graph visualisation library in JS
stix cti threat-intelligence
stix cti threat-intelligence stix2
HTML
•
BSD 3-Clause "New" or "Revised" License
•0•3•0•3•Updated Jun 3, 2026Jun 3, 2026
stix2icons
Public
A collection of icons to represent STIX objects
stix2
stix2
Python
•
Apache License 2.0
•0•11•0•0•Updated Jun 3, 2026Jun 3, 2026
stix2extensions
Public
This repository is used to share custom STIX objects created by the dogesec community.
Python
•
Apache License 2.0
•0•5•0•0•Updated Jun 1, 2026Jun 1, 2026
file2txt
Public
Turn a supported list of filetypes (e.g. .docx) into a markdown structured text file. Also optionally defangs indicators and extract texts from images. Built fo…
markdown ocr html-to-markdown
markdown ocr html-to-markdown image-to-text pdf-to-markdown
Python
•
Apache License 2.0
•2•12•0•3•Updated Jun 1, 2026Jun 1, 2026
cwe2stix
Public
A command line tool that turns MITRE CWEs into STIX 2.1 Objects.
vulnerability stix cve
vulnerability stix cve threat-intelligence stix2 stix2-extensions mitre-cwe
Python
•
Apache License 2.0
•0•6•0•0•Updated May 28, 2026May 28, 2026
txt2stix
Public
Extracts IoCs, TTPs and the relationships between them. Outputs a STIX 2.1 bundle.
cyber-threat-intelligence stix2 stix2-extensions
cyber-threat-intelligence stix2 stix2-extensions stix2-patterns
Python
•
Apache License 2.0
•7•81•0•0•Updated May 23, 2026May 23, 2026
ctibutler-website
Public
https://www.ctibutler.com
HTML
•0•0•0•0•Updated May 20, 2026May 20, 2026

ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

dogesec

All

All

47 repositories

obstracts

ctibutler

opencti-connectors

cloak2stix

stixify

stix4doge

cyberthreatexchange

siemrules

vulmatch

dogesec_commons

txt2detection

history4feed

arango_taxii_server

feeds2stix

ransomware2stix

arango_cti_processor

arango_cve_processor

stix2arango

sitemap2posts

stixify_chrome_extension

cve2stix

awesome_threat_intel_blogs

sigmahq2siemrules

stixviewer

stix2icons

stix2extensions

file2txt

cwe2stix

txt2stix

ctibutler-website

All

All

Repositories list

47 repositories