Threat Sharing Python Packages

pymisp

Python library using the MISP Rest API

ioc-fanger

Fang and defang indicators of compromise. You can test this project in a GUI here: http://ioc-fanger.hightower.space .

iocextract

Defanged Indicator of Compromise (IOC) Extractor.

ioc-finder

Simple, effective, and modular package for parsing observables (indicators of compromise (IOCs), network data, and other, security related information) from text. It uses grammars rather than regexes which makes it more readable, maintainable, and hackable. Explore our interactive documentation here: https://hightower.space/ioc-finder/

cabby

TAXII client implementation from EclecticIQ

threatingestor

Extract and aggregate threat intelligence.

cowrie

Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/

pyeti-python3

Python bindings for Yeti's API

opentaxii

TAXII server implementation in Python from EclecticIQ

csirtgsdk

the fastest way to publish threat intel

csirtg-smrt

s.m.r.t

blockade-toolkit

Analyst tools to speed up interacting with the Blockade cloud node

misp-stix-converter

A tool to convert between STIX and MISP format

cy-ioc-finder

Python package for finding and parsing indicators of compromise from text.

pymisp-async

Python library using the MISP Rest API