ch0ic3/awesome-threat-intelligence
1
0
Fork 0
mirror of https://github.com/hslatman/awesome-threat-intelligence.git synced 2024-12-22 12:26:19 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Merge branch 'hs_jp20' into hs_f3ead

Browse Source
This commit is contained in:
Herman Slatman 2016-04-11 11:50:18 +02:00
commit 5f17c0b81f
1 changed files with 12 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
README.md
View File

@ -165,7 +165,7 @@ Standardized formats for sharing Threat Intelligence (mostly IOCs).
</tr> </tr>
<tr> <tr>
<td> <td>
<a href="http://tools.ietf.org/html/rfc5070" target="_blank">IODEF (RFC5070)</a> <a href="https://tools.ietf.org/html/rfc5070" target="_blank">IODEF (RFC5070)</a>
</td> </td>
<td> <td>
The Incident Object Description Exchange Format (IODEF) defines a data representation that provides a framework for sharing information commonly exchanged by Computer Security Incident Response Teams (CSIRTs) about computer security incidents. The Incident Object Description Exchange Format (IODEF) defines a data representation that provides a framework for sharing information commonly exchanged by Computer Security Incident Response Teams (CSIRTs) about computer security incidents.
@ -173,7 +173,7 @@ Standardized formats for sharing Threat Intelligence (mostly IOCs).
</tr> </tr>
<tr> <tr>
<td> <td>
<a href="http://tools.ietf.org/html/rfc4765" target="_blank">IDMEF (RFC4765)</a> <a href="https://tools.ietf.org/html/rfc4765" target="_blank">IDMEF (RFC4765)</a>
</td> </td>
<td> <td>
<i>Experimental</i> - The purpose of the Intrusion Detection Message Exchange Format (IDMEF) is to define data formats and exchange procedures for sharing information of interest to intrusion detection and response systems and to the management systems that may need to interact with them. <i>Experimental</i> - The purpose of the Intrusion Detection Message Exchange Format (IDMEF) is to define data formats and exchange procedures for sharing information of interest to intrusion detection and response systems and to the management systems that may need to interact with them.
@ -303,7 +303,7 @@ Frameworks, platforms and services for collecting, analyzing, creating and shari
</tr> </tr>
<tr> <tr>
<td> <td>
<a href="https://github.com/Intelworks/OpenTAXII" target="_blank">OpenTAXII</a> <a href="https://github.com/EclecticIQ/OpenTAXII" target="_blank">OpenTAXII</a>
</td> </td>
<td> <td>
OpenTAXII is a robust Python implementation of TAXII Services that delivers a rich feature set and a friendly Pythonic API built on top of a well designed application. OpenTAXII is a robust Python implementation of TAXII Services that delivers a rich feature set and a friendly Pythonic API built on top of a well designed application.
@ -384,7 +384,7 @@ All kinds of tools for parsing, creating and editing Threat Intelligence. Mostly
<table> <table>
<tr> <tr>
<td> <td>
<a href="https://github.com/Intelworks/cabby" target="_blank">cabby</a> <a href="https://github.com/EclecticIQ/cabby" target="_blank">cabby</a>
</td> </td>
<td> <td>
A simple Python library for interacting with TAXII servers. A simple Python library for interacting with TAXII servers.
@ -657,6 +657,14 @@ All kinds of reading material about Threat Intelligence. Includes (scientific) r
The intrusion kill chain as presented in this paper provides one with a structured approach to intrusion analysis, indicator extraction and performing defensive actions. The intrusion kill chain as presented in this paper provides one with a structured approach to intrusion analysis, indicator extraction and performing defensive actions.
</td> </td>
</tr> </tr>
<tr>
<td>
<a href="http://www.dtic.mil/doctrine/new_pubs/jp2_0.pdf" target="_blank">Joint Publication 2-0: Joint Intelligence</a>
</td>
<td>
This publication by the U.S army forms the core of joint intelligence doctrine and lays the foundation to fully integrate operations, plans and intelligence into a cohesive team. The concepts presented are applicable to (Cyber) Threat Intelligence too.
</td>
</tr>
<tr> <tr>
<td> <td>
<a href="http://download.microsoft.com/download/8/0/1/801358EC-2A0A-4675-A2E7-96C2E7B93E73/Framework_for_Cybersecurity_Info_Sharing.pdf" target="_blank">Microsoft Research Paper</a> <a href="http://download.microsoft.com/download/8/0/1/801358EC-2A0A-4675-A2E7-96C2E7B93E73/Framework_for_Cybersecurity_Info_Sharing.pdf" target="_blank">Microsoft Research Paper</a>