IOC (Indicator of Compromise) OSINT Tools

MITRE ATT&CK

Adversary tactics and techniques knowledge base

AbuseIPDB

a community IP reputation database for checking and reporting abusive interne

AlienVault OTX

a community threat intelligence exchange for pulses, indicators, malware, and

Cisco Talos Intelligence

a threat reputation portal for IPs, domains, malware, vulnerabilities, and sp

Cortex

an observable analysis and active response engine used with TheHive and secur

CyberChef

a browser-based data transformation workbench for decoding, parsing, hashing,

Cyberbro

Extract IOCs from raw text and enrich them across reputation services

Feodo Tracker

an abuse.ch tracker for botnet command-and-control indicators associated with

Google Safe Browsing

a Google service and API for checking URLs against unsafe web resource lists

IBM X-Force Exchange

a threat intelligence sharing and enrichment platform for indicators, malware

MISP

an open-source threat intelligence platform for sharing indicators, events, g

Malwarebytes Labs

a threat research publication and malware intelligence source for campaigns a

OpenCTI

an open-source cyber threat intelligence platform for modeling entities, rela

OpenIOC Editor

Mandiant OpenIOC XML editor

OpenPhish

a phishing intelligence service that detects and publishes active phishing in

PhishTank

a community phishing verification service for checking and submitting suspect

Pulsedive

a threat intelligence platform for enriching indicators, domains, IPs, and UR

TheHive

a scalable security incident response platform for case management and analys

ThreatFox

an abuse.ch platform for sharing malware indicators and command-and-control i

Yeti

an intelligence platform for organizing observables, indicators, entities, an