Threat Sharing Python Packages

pymisp

Python library using the MISP Rest API

ioc-fanger

Fang and defang indicators of compromise. You can test this project in a GUI here: http://ioc-fanger.hightower.space .

iocextract

Defanged Indicator of Compromise (IOC) Extractor.

ioc-finder

Simple, effective, and modular package for parsing observables (indicators of compromise (IOCs), network data, and other, security related information) from text. It uses grammars rather than regexes which makes it more readable, maintainable, and hackable. Explore our interactive documentation here: https://hightower.space/ioc-finder/

cabby

TAXII client implementation from EclecticIQ

cowrie

Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/

threatingestor

Extract and aggregate threat intelligence.

pyeti-python3

Python bindings for Yeti's API

opentaxii

TAXII server implementation in Python from EclecticIQ

csirtgsdk

the fastest way to publish threat intel

csirtg-smrt

the fastest way to consume threat intelligence.

blockade-toolkit

Analyst tools to speed up interacting with the Blockade cloud node

pymisp-async

Python library using the MISP Rest API

cy-ioc-finder

Simple, effective, and modular package for parsing observables (indicators of compromise (IOCs), network data, and other, security related information) from text. It uses grammars rather than regexes which makes it more readable, maintainable, and hackable. Explore our interactive documentation here: https://hightower.space/ioc-finder/

misp-stix-converter

A utility repo to assist with converting between MISP and STIX formats