From 0d1d65a4541244d60cc5576a3684c5dff03a961f Mon Sep 17 00:00:00 2001 From: Herman Slatman Date: Thu, 14 Apr 2016 17:03:47 +0200 Subject: [PATCH 1/2] stoQ platform added --- README.md | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/README.md b/README.md index 41d3561..22fb8fd 100644 --- a/README.md +++ b/README.md @@ -333,6 +333,15 @@ Frameworks, platforms and services for collecting, analyzing, creating and shari The PassiveTotal platform offered by RiskIQ is a threat-analysis platform which provides analysts with as much data as possible in order to prevent attacks before they happen. Several types of solutions are offered, as well as integrations (APIs) with other systems. + + + stoQ + + + stoQ is a framework that allows cyber analysts to organize and automate repetitive, data-driven tasks. It features plugins for many other systems to interact with. + One use case is the extraction of IOCs from documents, an example of which is shown here, but it can also be used for deobfuscationg and decoding of content and automated scanning with YARA, for example. + + TARDIS From 465beb9962d828e28840ab788a15ff4128cdd8e2 Mon Sep 17 00:00:00 2001 From: Herman Slatman Date: Thu, 14 Apr 2016 17:07:57 +0200 Subject: [PATCH 2/2] Change of website for ENISA (IntelMQ) --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 22fb8fd..4632c91 100644 --- a/README.md +++ b/README.md @@ -244,7 +244,7 @@ Frameworks, platforms and services for collecting, analyzing, creating and shari - IntelMQ + IntelMQ IntelMQ is a solution for CERTs for collecting and processing security feeds, pastebins, tweets using a message queue protocol. It's a community driven initiative called IHAP (Incident Handling Automation Project) which was conceptually designed by European CERTs during several InfoSec events. Its main goal is to give to incident responders an easy way to collect & process threat intelligence thus improving the incident handling processes of CERTs.