Threat Intelligence Bundle

Browse all skill bundles

Included Skills (12)

1. CTI Pattern Extractor — This tool automates the extraction of adversary behaviors from cyber threat intelligence reports to build structured STIX libraries for threat-informed detection engineering.
2. Extracting Iocs From Malware Samples — Extracts indicators of compromise (IOCs) from malware samples, including
3. Ransomware Leak Monitor — This tool monitors ransomware data leak sites to extract victim data and generate actionable threat intelligence reports for cybersecurity analysts and risk managers.
4. Performing Ip Reputation Analysis With Shodan — Analyze IP address reputation using the Shodan API to identify open ports,
5. Threat Intelligence Mapper — This skill maps threat actor behaviors to the MITRE ATT&CK framework to identify detection gaps and generate actionable intelligence reports for cybersecurity professionals.
6. Building Detection Rules With Sigma — Builds vendor-agnostic detection rules using the Sigma rule format for
7. Collecting Open Source Intelligence — Collects and synthesizes open-source intelligence (OSINT) about threat
8. Diamond Model Analyzer — This tool enables cybersecurity professionals to programmatically classify intrusion events and correlate threat data using the structured Diamond Model framework for actionable intelligence.
9. Threat Intelligence Analyst — This tool helps security analysts evaluate indicators of compromise by aggregating threat intelligence to determine maliciousness, campaign attribution, and appropriate defensive response actions.
10. Performing Automated Malware Analysis With Cape — Deploy and operate the CAPEv2 malware sandbox (a Cuckoo derivative) to run samples in a
11. MISP Threat Analyst — This tool queries MISP instances to generate comprehensive threat intelligence reports, helping cybersecurity professionals identify trends, threat actors, and malware families effectively.
12. MISP Threat Intelligence — This skill utilizes PyMISP to automate the creation, enrichment, and sharing of structured threat intelligence for cybersecurity analysts and incident responders.