Threathunting Python Packages

tenzir

Tenzir is the data pipeline engine for security teams.

malwoverview

Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.

pyvast

Tenzir is the data pipeline engine for security teams.

pytenzir

Tenzir is the data pipeline engine for security teams.

openuba

OpenUBA CLI & SDK — install, run, and manage user behavior analytics models

sysxtract

Extract logs based off events from sysmon. Comes as a package, cli and ui.