Catalog sources
1.2K
curated
No-auth / free
923
ready to use
Matching filter
22
filtered
Disciplines
45
mapped
🔍 Search & Filter
Sources (22)
| Name | Category | Auth | Format | Disciplines | Domains | |
|---|---|---|---|---|---|---|
| abuse.ch SSLBL JA3 Fingerprints Malicious TLS client JA3 fingerprint blocklist. |
CERTINT | NONE | csv |
CERTINT MALINT | mal cc apt | home↗ api↗ |
| abuse.ch ThreatFox Family-labelled IoC exchange. |
Threat Analysis | NONE | json |
CYBINT MALINT | threat mal | home↗ api↗ |
| APTnotes Public archive of APT research reports. |
APT | NONE | json |
ACTORINT MALINT | apt | home↗ api↗ |
| Botvrij.eu (CIRCL) Open source of vetted IoCs published as MISP feed and plain lists. |
ioc-feed | NONE | bulk |
MALINT CYBINT | mal | home↗ |
| Cybercrime Tracker Long-running tracker of banking-trojan and botnet C2 panel URLs. |
c2-tracker | NONE | html |
MALINT CYBINT | mal | home↗ |
| DigitalSide Threat-Intel (OSINT.digitalside.it) Free OSINT IoC feeds (domains, IPs, URLs, hashes) in MISP, STIX and CSV. |
ioc-feed | NONE | csv |
MALINT CYBINT | mal | home↗ |
| Emerging Threats Open Open Suricata/Snort rules plus compromised and blocklist IP feeds. |
blocklist | NONE | bulk |
CYBINT MALINT | mal | home↗ |
| ETDA Threat Group Cards APT group encyclopedia with tools and campaigns. |
Nation State | NONE | json |
ACTORINT MALINT | ns apt | home↗ api↗ |
| ETDA/ThaiCERT APT Encyclopedia Searchable encyclopedia of threat actors and their tools and operations. |
threat-actor | NONE | html |
ACTORINT MALINT | mal | home↗ |
| Feodo Tracker (abuse.ch) Tracks botnet C2 servers for Emotet, Dridex, QakBot and TrickBot. |
c2-tracker | NONE | json |
MALINT CYBINT | mal | home↗ api↗ |
| InQuest Labs Free research tools including DFI file analysis, IOCdb and reputation data. |
malware-repo | NONE | rest |
MALINT CYBINT | mal | home↗ api↗ |
| Malware-Traffic-Analysis.net Blog of malware infection traffic PCAPs, samples and IoCs for training. |
malware-repo | NONE | html |
MALINT CYBINT | mal | home↗ |
| MISP Galaxy Open knowledge base of threat actors, malware and technique clusters as JSON. |
threat-actor | NONE | bulk |
ACTORINT MALINT | mal | home↗ api↗ |
| MISP Project (default feeds) Curated list of free MISP-format OSINT threat feeds for ingestion. |
ioc-feed | NONE | json |
MALINT CYBINT ACTORINT | mal | home↗ |
| MITRE ATT&CK Groups (STIX) Adversary groups, software and techniques. |
APT | NONE | json |
ACTORINT MALINT CYBINT | apt ns | home↗ api↗ |
| Neo23x0 signature-base (Florian Roth) Widely used open YARA and Sigma rule set behind THOR/Loki scanners. |
yara | NONE | bulk |
MALINT | mal | home↗ |
| ORKL Threat Report Library Full-text CTI report library API. |
APT | NONE | json |
ACTORINT MALINT | apt threat | home↗ api↗ |
| SSL Blacklist / JA3 (abuse.ch) Blacklist of SSL certificates and JA3/JA3S fingerprints tied to malware C2. |
c2-tracker | NONE | csv |
MALINT CYBINT | mal | home↗ api↗ |
| ThreatMiner Free data mining portal for domains, IPs, hashes and related threat context. |
ioc-feed | NONE | rest |
MALINT CYBINT | mal | home↗ api↗ |
| vx-underground Massive free archive of malware samples, source code and research papers. |
malware-repo | NONE | html |
MALINT ACTORINT | mal | home↗ |
| YARA / Sigma / Detection Rules Open detection-signature repositories. |
MALINT | NONE | text |
MALINT | mal threat | home↗ api↗ |
| YARA-Rules Project Community-maintained repository of categorized open-source YARA rules. |
yara | NONE | bulk |
MALINT | mal | home↗ |
Curated intelligence source catalog (Paradigm Fusion). Key-free machine-readable sources are auto-registered into the Feed Registry for collection. Browse by Mission Domain or Discipline.
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports
🤖 AI Copilot
⚡ AI Skills
🔍 Lookup & Enrich
📚 Docs & Reports
💡 Recommendations
- Explore related tools below
- Automate recurring work via cron