“threat intelligence”

Design and deploy a Threat Intelligence Platform (TIP) by integrating open-source CTI tools (MISP, OpenCTI, TheHive, Cortex) into a unified system with feed…

Analyzes structured and unstructured threat intelligence feeds to extract actionable indicators, adversary tactics, and campaign context.

Builds automated threat intelligence feed integration pipelines connecting STIX/TAXII feeds, open-source threat intel, and commercial TI platforms into SIEM…

Evaluates and selects Threat Intelligence Platform (TIP) products based on organizational requirements including feed integration capability, STIX/TAXII…

Deploy MISP, configure threat feeds (MISP community, freetext, TAXII, CSV), and use the PyMISP API to programmatically fetch, add, and search events and IOCs…

Build automated IOC enrichment pipelines in Splunk Enterprise Security by ingesting threat feeds into KV Store collections and correlating them against…

Reputation for IPs, domains, URLs, hashes, emails, phones; CVEs; injection and email scans

Threadlinqs threat-intelligence MCP — 73 tools: threats, detections, IOCs, actors, C2, MITRE, CVEs

Build a systematic threat hunt hypothesis framework that transforms threat intelligence, attack patterns, and environmental data into testable hunting…

Threat Intelligence Report Design System — ReportLab-based PDF generation for A4 reports with Transilience branding, typography, and layout standards.

Build a systematic threat-hunt workflow that turns threat intelligence and ATT&CK gap analysis into testable hypotheses, then executes and validates them via…

Deploy MISP via Docker and configure feeds from sources like abuse.ch, AlienVault OTX, and CIRCL to aggregate, correlate, and distribute threat intelligence…

Check file hashes, URLs, domains, and IP addresses against 70+ antivirus engines and threat intelligence feeds via VirusTotal

Online threat intelligence: after component identification, search CVE/search-engines/security-community/GitHub PoC/asset-engines/live-intel/dependency-chain…

Apply the NATO Admiralty System (AJP-2.1) to assess source reliability and information credibility in cyber threat intelligence, OSINT, and breach analysis.

Malware analysis and threat intelligence — unpacking, configuration extraction, behavior profiling, C2 protocol decoding, IOC extraction, YARA/Sigma rule…

MCP server for Proofpoint TAP — threat intelligence, forensics, quarantine, and email security.

Embeds harmful requests as completed security research entries in a threat intelligence database, where the model generates summaries of already-documented…

MCP server for Proofpoint TAP — threat intelligence, forensics, quarantine, and email security.

Parse cyber threat intelligence reports (Mandiant, CrowdStrike, Talos, Microsoft) with stix2, mitreattack-python, and spaCy to extract adversary behaviors…

Agentic memory for cyber threat intelligence.

Automates the enrichment of raw indicators of compromise with multi-source threat intelligence context using SOAR platforms, Python pipelines, or TIP…

MCP server for AlienVault OTX threat intelligence: indicators, pulses, search, and users.

Autonomous Anomaly Detection & Threat Intelligence platform on high-dimensional Kaggle cloud telemetry dataset with multi-backbone models (Isolation Forest…