Threat Sharing Python Packages

pymisp

Python library using the MISP Rest API

ioc-fanger

Fang and defang indicators of compromise. You can test this project in a GUI here: http://ioc-fanger.hightower.space .

iocextract

Defanged Indicator of Compromise (IOC) Extractor.

ioc-finder

Simple, effective, and modular package for parsing observables (indicators of compromise (IOCs), network data, and other, security related information) from text. It uses grammars rather than regexes which makes it more readable, maintainable, and hackable. Explore our interactive documentation here: https://hightower.space/ioc-finder/

cabby

TAXII client implementation from EclecticIQ

threatingestor

Extract and aggregate threat intelligence.

csirtg-smrt

the fastest way to consume threat intelligence.

pyeti-python3

Python bindings for Yeti's API

cowrie

Cowrie SSH/Telnet Honeypot.

opentaxii

TAXII server implementation in Python from EclecticIQ

blockade-toolkit

Analyst tools to speed up interacting with the Blockade cloud node

cy-ioc-finder

Python package for finding and parsing indicators of compromise from text.

misp-stix-converter

A utility repo to assist with converting between MISP and STIX formats

pymisp-async

Python library using the MISP Rest API