sophoslabs/IoCs

Threat Intel IoCs + bits and pieces of dark matter. Published by Gen Threat Labs.

Curated sources of indicators of compromise, detection signatures and IOC tools.

Indicators of Compromises (IOC) of our various investigations

This repository contains Open Source freely usable Threat Intel feeds that can be used without additional requirements. Contains multiple types such as IP, URL, CVE and Hash.

Interesting APT Report Collection And Some Special IOCs

Automatically created C2 Feeds

STIX data representing MITRE ATT&CK

A collection of files with indicators supporting social media posts from Palo Alto Network's Unit 42 team to disseminate timely threat intelligence.

TweetFeed collects Indicators of Compromise (IOCs) shared by the infosec community at Twitter. Here you will find malicious URLs, domains, IPs, and SHA256/MD5 hashes.