IntelOwl
AGPL-3.0🧠 Threat Intelligence · Python
IntelOwl: manage your Threat Intelligence at scale
Installation
$ docker compose up -dUse Cases
- Automated IOC enrichment at scale
- Malware sample analysis orchestration
- Threat intel feed aggregation and correlation
Tags
Details
- Category
- 🧠 Threat Intelligence
- Language
- Python
- Repository
- intelowlproject/IntelOwl
- License
- AGPL-3.0
- Platforms
- 🐧linux🍎macos🪟windows
Links
Alternatives & Comparisons
More in Threat Intelligence
MISP
PHP/PythonOpen-source threat intelligence and sharing platform. Structured IOC management, feeds, correlation, and STIX/TAXII export.
OpenCTI
TypeScript/PythonCyber threat intelligence platform. Knowledge management for threat data with STIX2 native storage and graph visualization.
TheHive
Scala/JavaScriptIncident response case management platform. Collaborative investigation with observable analysis, playbooks, and MISP integration.
GRR Rapid Response
PythonRemote live forensics framework by Google. Deploy agents across thousands of endpoints for artifact collection and analysis.
KAPE
C#Kroll Artifact Parser and Extractor. Fast triage collection and parsing of forensic artifacts from Windows, macOS, and Linux.
Cortex
Scala/PythonObservable analysis and active response engine. Analyze IOCs at scale with 100+ analyzers for IPs, hashes, URLs, and domains.