Awesome-Mirrors/awesome-threat-intelligence
1
0
Fork 0
mirror of https://github.com/hslatman/awesome-threat-intelligence.git synced 2025-02-12 21:11:36 -05:00
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'sduff-master'

Browse Source
This commit is contained in:
Herman Slatman 2017-01-22 14:02:53 +01:00
commit 5c6794e6de
1 changed files with 12 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
README.md
View File

@ -192,7 +192,17 @@ A certain amount of (domain- or business-specific) analysis is necessary to crea
<a href="http://ransomwaretracker.abuse.ch/" target="_blank">Ransomware Tracker</a> <a href="http://ransomwaretracker.abuse.ch/" target="_blank">Ransomware Tracker</a>
</td> </td>
<td> <td>
The Ransomware Tracker by <a href="https://www.abuse.ch/" target="_blank">abuse.ch</a> tracks and monitors the status of domain names, IP addresses and URLs that are associated with Ransomware, such as Botnet C&C servers, distribution sites and payment sites. The Ransomware Tracker by <a href="https://www.abuse.ch/" target="_blank">abuse.ch</a> tracks and monitors the status of domain names, IP addresses and URLs that are associated with Ransomware, such as Botnet C&mp;C servers, distribution sites and payment sites.
</td>
</tr>
<tr>
<td>
<a href="https://isc.sans.edu/suspicious_domains.html" target="_blank">SANS ICS Suspicious Domains</a>
</td>
<td>
The Suspicious Domains Threat Lists by <a href="https://isc.sans.edu/suspicious_domains.html" target="_blank">SANS ICS</a> tracks suspicious domains. It offers 3 lists categorized as either <a href="https://isc.sans.edu/feeds/suspiciousdomains_High.txt" target="_blank">high</a>, <a href="https://isc.sans.edu/feeds/suspiciousdomains_Medium.txt" target="_blank">medium</a> or <a href="https://isc.sans.edu/feeds/suspiciousdomains_Low.txt" target="_blank">low</a> sensitivity, where the high sensitivity list has fewer false positives, whereas the low sensitivty list with more false positives. There is also an <a href="https://isc.sans.edu/feeds/suspiciousdomains_whitelist_approved.txt" target="_blank">approved whitelist</a> of domains.<br/>
Finally, there is a suggested <a href="https://isc.sans.edu/block.txt" target="_blank">IP blocklist</a> from <a href="https://dshield.org">DShield</a>.
</td> </td>
</tr> </tr>
<tr> <tr>
@ -973,7 +983,7 @@ All kinds of tools for parsing, creating and editing Threat Intelligence. Mostly
</tr> </tr>
<tr> <tr>
<td> <td>
<a href="https://github.com/tomchop/yeti" target="_blank">yeti/a> <a href="https://github.com/tomchop/yeti" target="_blank">yeti</a>
</td> </td>
<td> <td>
Your Everyday Threat Intelligence (YETI). Your Everyday Threat Intelligence (YETI).