Skip to content
View mhearsh's full-sized avatar

Block or report mhearsh

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
mhearsh/README.md

Threat intelligence, shipped as ready-to-import feeds 🛡️

threat-intel-feed feeds release

threat-intel-feed: a curated, high-confidence IOC feed (IPs, domains, URLs, SHA-256/SHA-1/MD5) scored 0–100 and refreshed every 2 hours.

  • 🔥 Firewalls: Palo Alto EDL, FortiGate, Check Point, Cisco FMC, Sophos, Suricata
  • 🖥️ EDR/XDR: Microsoft Defender, CrowdStrike, SentinelOne, ESET, Trend Vision One, Cortex XDR
  • 📊 SIEM/SOAR: Microsoft Sentinel (STIX 2.1), Splunk ES, Wazuh, MISP / OpenCTI
  • 📘 Integration guide (PDF) · Feed index

Popular repositories Loading

  1. list list Public

  2. threat-intel-list threat-intel-list Public

    Curated threat intelligence feeds containing malicious IPs for firewalls, IDS/IPS, and SOC monitoring.

  3. Trav Trav Public

    HTML

  4. threat-intel-feed threat-intel-feed Public

    Curated high-confidence IOC feed (IP, domain, URL, file hashes), 0-100 scored, every 2h. Ready-to-import for Palo Alto, FortiGate, Check Point, Cisco, Defender, CrowdStrike, SentinelOne, Splunk, Se…

    Python

  5. mhearsh mhearsh Public

    Profile README