Reporting

A powerful open source threat intelligence platform that can be used to store, share and receive information about malware, threats, and vulnerabilities in a structured way.

MISP

Provides a variety of web forms for reporting on numerous attack vectors. Automatically converts the data into structured MISP reports.

MISP-Forms

Reference

An open-source platform designed to act as a trusted contact information provider and interconnection orchestrator for other security tools.

Cerebrate

Assists network defenders and analysts in the process of mapping adversary behaviors to the MITRE ATT&CK® Framework.

Decider

Evidence Analysis

A service to discover if a file is suspicious and conveniently show the results with content preview interface for large documents, including a preview of the metadata.

Pandora

A web interface that captures a webpage in motion and displays a tree of the domains, that call each other. Ideal for view suspicious website.

Lookyloo

Evidence Collection

A service for identifying potential typo-squatted domains, allowing for quick inspection and assessment of whether any fake domains are being used by an adversary.

Typo-squatting Finder

Analyse potential information leaks from unstructured data sources like pastes from Pastebin or other unstructured data streams.