Repositories list

• fever

  Public
  fast, extensible, versatile event router for Suricata's EVE-JSON format

  golangsecurityjson+ 7monitoringbloom-filterevesuricataintrusion-detectionnetsecpdns

  Go

  •

  Other

  •8•57•2•0•Updated Nov 20, 2025Nov 20, 2025

• nightwatch

  Public
  A plugin-based file analysis framework for Suricata file stores

  filessuricataids+ 3nidsyarayara-scanner

  Go

  •

  BSD 3-Clause "New" or "Revised" License

  •0•4•0•0•Updated Nov 20, 2025Nov 20, 2025

• balboa

  Public
  server for indexing and querying passive DNS observations

  apigraphqldns+ 11golangrocksdbsecuritymonitoringpassivesuricatahacktoberfest+ 4

  C

  •

  Other

  •7•49•11•1•Updated Nov 18, 2025Nov 18, 2025

• Blog_CyTec

  Public
  Repository to provide files related to our blog articles.

  Python

  •0•16•0•0•Updated May 26, 2025May 26, 2025

• mauerspecht

  Public
  Simple Probing Tool for Corporate Walled Garden Networks

  Go

  •

  GNU General Public License v3.0

  •2•3•0•0•Updated Mar 14, 2025Mar 14, 2025

• mini-syslog-receiver

  Public
  Mini Syslog Receiver

  Go

  •

  Other

  •0•4•0•0•Updated Apr 22, 2024Apr 22, 2024

• misp-taxonomies

  Public
  Taxonomies used in MISP taxonomy system and can be used by other information sharing tool.

  Python

  •

  Other

  •145•0•0•0•Updated Feb 7, 2024Feb 7, 2024

• TIE-Splunk-TA

  Public
  DCSO Threat Intelligence Engine (TIE) Add-On for Splunk v8

  splunksplunk-applicationsplunk-addon+ 1technical-addon

  Python

  •

  BSD 3-Clause "New" or "Revised" License

  •2•3•5•2•Updated Jan 31, 2024Jan 31, 2024

• fn_misp_dcso

  Public archive
  Python

  •0•2•0•0•Updated Dec 15, 2023Dec 15, 2023

• maapi

  Public archive
  Unofficial Mandiant Advantage API Client

  Python

  •

  GNU General Public License v3.0

  •1•0•0•0•Updated Nov 4, 2023Nov 4, 2023

• tie-threatbus-bridge

  Public archive
  tool to feed IoCs from DCSO TIE to Threat Bus

  Go

  •

  Other

  •0•5•1•0•Updated Sep 22, 2023Sep 22, 2023

• suricata

  Public
  Repository for Suricata contributions by DCSO

  C

  •

  GNU General Public License v2.0

  •1.6k•0•0•0•Updated Aug 31, 2023Aug 31, 2023

• tiffy

  Public
  TIE Feed Generator for MISP (replaces tie2misp)

  misp

  Python

  •

  BSD 3-Clause "New" or "Revised" License

  •2•5•0•2•Updated May 22, 2023May 22, 2023

• MISP-dockerized-server

  Public archive
  dockerdockerfiledocker-image+ 2apache2misp

  Shell

  •

  BSD 3-Clause "New" or "Revised" License

  •6•4•3•1•Updated May 22, 2023May 22, 2023

• misp-warninglists

  Public
  Warning lists to inform users of MISP about potential false-positives or other information in indicators

  Python

  •186•0•0•0•Updated Apr 20, 2023Apr 20, 2023

• sigma

  Public archive
  Generic Signature Format for SIEM Systems

  Python

  •

  Other

  •2.5k•0•0•0•Updated Jan 6, 2023Jan 6, 2023

• suricata-rules

  Public
  Suricata Rules by DCSO

  Other

  •0•3•0•0•Updated Jan 3, 2023Jan 3, 2023

• MISP

  Public
  MISP (core software) - Open Source Threat Intelligence and Sharing Platform (formely known as Malware Information Sharing Platform)

  PHP

  •

  GNU Affero General Public License v3.0

  •1.5k•0•0•0•Updated Jan 3, 2023Jan 3, 2023

• dcso-portal-python-sdk

  Public archive
  DCSO Portal Python SDK

  Python

  •

  MIT License

  •4•1•2•0•Updated Oct 26, 2022Oct 26, 2022

• bloom

  Public
  A highly efficient Bloom filter library and command line tool written in Go.

  Go

  •

  Other

  •14•77•1•1•Updated Sep 16, 2022Sep 16, 2022

• dcso-portal-stackstorm

  Public archive
  DCSO Portal StackStorm Package

  stackstorm

  Python

  •

  MIT License

  •3•1•1•0•Updated May 31, 2022May 31, 2022

• misp-modules

  Public
  Modules for expansion services, import and export in MISP

  Python

  •

  GNU Affero General Public License v3.0

  •250•0•0•0•Updated Nov 24, 2021Nov 24, 2021

• gotie

  Public archive
  Go bindings for the DCSO TIE

  Go

  •

  Other

  •1•2•0•0•Updated Jul 26, 2021Jul 26, 2021

• suricata-verify

  Public
  Suricata Verification Tests - Testing Suricata Output

  Python

  •104•0•0•0•Updated Feb 28, 2021Feb 28, 2021

• fluxline

  Public
  Golang library to prepare sets of metrics in InfluxDB's Line Protocol format

  golanglibrarymonitoring+ 5influxdbmetricsencoderdiylineprotocol

  Go

  •

  Other

  •4•5•0•0•Updated Sep 7, 2020Sep 7, 2020

• TIE-Splunk-App

  Public archive
  Splunk App (Dashboard) for DCSO Threat Intelligence Engine (TIE)

  Python

  •

  BSD 3-Clause "New" or "Revised" License

  •0•2•11•0•Updated Jun 17, 2020Jun 17, 2020

• MISP-dockerized

  Public
  dockerdocker-composefull-stack+ 4mispthreat-intelligence-platformmisp-docker-environmentmisp-docker

  Shell

  •

  BSD 3-Clause "New" or "Revised" License

  •9•34•7•0•Updated May 4, 2020May 4, 2020

• MISP-dockerized-robot

  Public archive
  dockerdockerfileansible+ 2docker-composedocker-container

  Shell

  •

  BSD 3-Clause "New" or "Revised" License

  •0•0•0•0•Updated Apr 28, 2020Apr 28, 2020

• bintag

  Public
  IDA Pro BinTag Plugin

  C++

  •

  MIT License

  •3•3•1•0•Updated Apr 20, 2020Apr 20, 2020

• MISP-dockerized-misp-modules

  Public archive
  https://github.com/DCSO/MISP-dockerized

  dockerfiledocker-imagemisp-modules+ 1misp

  Dockerfile

  •

  BSD 3-Clause "New" or "Revised" License

  •1•0•2•0•Updated Mar 27, 2020Mar 27, 2020