This project is a SIEM with SIRP and Threat Intel, all in one.

🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.

Maltego local and server integration for OpenCTI

Helm chart for Open Cyber Threat Intelligence Platform

A highly available AWS deployment of the Threat Intelligence platform, OpenCTI using Terraform. Native AWS resources are used where feasible.

Wazuh extension looking up alert data against indicators in OpenCTI threat intel

Purpose-built data connectors for Google CDAP data pipelines

Connector which enriches your knowledge by using CrowdSec's CTI API.

A repository dedicated to deliver a comprehensive set of tools for integration and convenient use of Kaspersky Threat Intelligence services

Cyber Defense Plattform for security incident investigation enrichment and automatisation.

IgniteGraph is a client layer for using Apache Ignite as a graph database. It is an implementation of the Apache TinkerPop interfaces.

OpenCTI–Wazuh connector looking for indicators in Wazuh and creating sightings

A collection of standalone Akka-based Http(s) services to connect to Fiware, OpenCTI, Osquery fleets, OPC-UA, ThingsBoard and Zeek.

Experimenting exporting and converting MISP galaxies and clusters into stix 2.1 format for easy import into other TI-platforms like openCTI

This project complements Apache Spark structured streaming with hand-picked streaming sources and sinks.

Docker Compose template for an OpenCTI Demo

Salesforce OpenCTI Demo Adapter

OpenCTI datasets

Open Cyber Threat Intelligence Platform

OpenCTI Python client