Threat Intel & Detection

Know the adversary. Write the rule.

10 resources

VirusTotal

Scans files, URLs, domains and IPs against dozens of antivirus engines.

needed · Free (API limits); paid plans

Community database of reported malicious IP addresses.

needed · Free tier; paid plans

Checks whether an email or password appeared in known data breaches.

needed · Free search; paid API

IBM's threat intelligence portal with IP, URL and malware reports.

resources · Free tier; paid plans

Check Point's live cyber attack map.

resources · Free

Live map of attacks detected by Kaspersky sensors.

resources · Free

Fortinet's outbreak threat map and threat research.

resources · Free

Open, shareable rule format for SIEM detections.

needed · Free

Web-based builder for Snort rules.

needed · Free

Open-source network intrusion detection and prevention system.

needed · Free; paid rule subscription