threat-intelligence

120-tool MCP server for real-time global intelligence: markets, SEC filings, conflict, military, cyber, climate, news, and 30+ domains. AI situation briefs that cite their sources, user-defined geofences with escalation scoring, cited daily digests, live SSE dashboard. MIT, no paid API keys.

由 Cryptware Apps 提供的大型恶意软件样本库，包含针对各种平台的 2500+ 个恶意软件样本与源码。

由 Trellix ATR 团队制作的 YARA 规则代码仓库

情治写作的精选资源集合，包含手册/指南、标准、书籍、培训、文章、视频等

Free educational courses in cybersecurity, reverse engineering, malware analysis, and programming designed to expand access, build practical skills, and support the next generation of cyber defenders.

收集 Palo Alto Network Unit 42 团队社交媒体贴文的指标文件，以传播即时威胁情报

CTI Expert — Cyber Threat Intelligence & OSINT analysis skill for Claude Code / Codex. 120+ commands, 57 techniques, 79 typed MCP tools, deterministic case pipeline + ICD-203 reports. No API keys required for core.

Self-contained malware research hub: curated catalog of 80 families (1971-2024) + 2,764 real encrypted samples, indexed and searchable. Local Flask app, bilingual.

去危险化（Defanged）的入侵指标 (IOC) 提取器。

具备企业级 SIEM、SOAR 与合规性功能，由实时关联分析与威胁情报驱动。

OpenCTI 连接器

精选的威胁情报博客列表

从 Windows Defender 的 mpavbase 和 mpasbase 提取的 Yara 规则。

全方位的 OSINT 与威胁猎捕平台