Cyber Threat Intelligence Python Packages

taxii2-client

OASIS TC Open Repository: TAXII 2 Client Library Written in Python

stix2-patterns

OASIS TC Open Repository: Validate patterns used to express cyber observable content in STIX Indicators

stix2

OASIS TC Open Repository: Python APIs for STIX 2

mitreattack-python

A python module for working with ATT&CK

stix2-validator

OASIS TC Open Repository: Validator for STIX 2.0 JSON normative requirements and best practices

stix2-elevator

OASIS Cyber Threat Intelligence (CTI) TC Open Repository: Convert STIX 1.2 XML to STIX 2.x JSON

cortexutils

Cortex Analyzers Repository

misp-lib-stix2

OASIS TC Open Repository: Python APIs for STIX 2

medallion

OASIS TC Open Repository: TAXII 2 Server Library Written in Python

txt2stix

Extracts IoCs, TTPs and the relationships between them. Outputs a STIX 2.1 bundle.

stix2-generator

OASIS Cyber Threat Intelligence (CTI) TC: A tool for generating STIX content for prototyping and testing. https://github.com/oasis-open/cti-stix-generator

opentaxii

TAXII server implementation in Python from EclecticIQ

rekos

Terminal-native passive OSINT CLI for local-first public-source investigations, evidence correlation, and case management.

mallorymcp

Mallory - Cyber Threat Intelligence MCP Server

stix2-slider

OASIS TC Open Repository: The repository cti-stix-slider supports development of a Python application to convert STIX 2.0 content to STIX 1.x content

mcp-cyberbro

Using MCP is fun with Cyberbro!

mseep-malloryai-mcp-server

Mallory - Cyber Threat Intelligence MCP Server

attack-stix-lookup

STIX data representing MITRE ATT&CK

jupyter-widget-stixview

Stixview library widget for Jupyter

metemcyber

Decentralized Cyber Threat Intelligence Kaizen Framework

iflow-mcp-malloryai-mallory-mcp-server

Mallory - Cyber Threat Intelligence MCP Server

misp-stix2

Produce and consume STIX 2 JSON content

pywhatcms

Unofficial WhatCMS API package