Multi-Source IP Threat Intelligence — AbuseIPDB, VirusTotal, Shodan, AlienVault OTX

Aiohttp-based microservice that is used to obtain OTX indicators over IPv4 addresses.

SOC IntelHub — IOC Triage Dashboard (VirusTotal + AbuseIPDB + OTX + MITRE Mapping) A portfolio project for SOC analysis, threat enrichment & automated ATT&CK mapping.

A simple Python lab for Cyber Threat Intelligence (CTI) operations. Fetch and export Indicators of Compromise (IOCs) from AlienVault's Open Threat Exchange (OTX) to CSV for analysis and threat hunting.

a python script for pushing tor relays to AlienVault

Sistema completo de Threat Intelligence con correlación de múltiples fuentes e integración con SIEM

Extract & scan IOCs against VirusTotal, AbuseIPDB & OTX AlienVault | Automated threat intelligence for SOC analysts

Loki - Simple IOC and YARA Scanner

AlientVault OTX - Open Threat Exchanage api integration

Off-box publisher stack for T-Pot + Cisco ASA that turns SSH / ADBHoney / ASA / full-honeypot telemetry into chunky, deduped AlienVault OTX pulses (IPs, URLs, hashes). Runs on its own VM over an SSH tunnel, with systemd’d schedulers and an AI-assisted brain doing the enrichment, tagging, and monthly “big boi” pulse rollups for you.

🔍 Analyze Indicators of Compromise (IOC) quickly and securely in your browser with Ahtapot, your essential tool for threat detection.

Passive subdomain discovery through LevelBlue OTX.

jimi OTX triggers and actions

A collection of PowerShell scripts to utilize 3rd party APIs and research IPs, URLs, and Domains

Creates and updates a DynamoDB database with a list of blacklisted IP addresses from public RBLs

An async C# library for interacting with the AlienVault OTX DirectConnect APIs.

Enables real-time control and monitoring of network traffic and system events.

HybridHashScanner is a versatile command-line tool for analyzing file hashes against multiple threat intelligence services, including MISP, CIRCL Hashlookup, OTX, Kaspersky, and VirusTotal. It supports single hash lookups, batch processing from CSV/TXT files, caching via SQLite, multithreading for efficiency, and optional Tor integration for anonym

Threat intelligence sourced IPtables rule automation,dynamically synchronized using a git repository