“threat intelligence”

Malware analysis and threat intelligence — unpacking, configuration extraction, behavior profiling, C2 protocol decoding, IOC extraction, YARA/Sigma rule…

MCP server for Proofpoint TAP — threat intelligence, forensics, quarantine, and email security.

Embeds harmful requests as completed security research entries in a threat intelligence database, where the model generates summaries of already-documented…

MCP server for Proofpoint TAP — threat intelligence, forensics, quarantine, and email security.

Parse cyber threat intelligence reports (Mandiant, CrowdStrike, Talos, Microsoft) with stix2, mitreattack-python, and spaCy to extract adversary behaviors…

Agentic memory for cyber threat intelligence.

Automates the enrichment of raw indicators of compromise with multi-source threat intelligence context using SOAR platforms, Python pipelines, or TIP…

mlab.sh

mlab.shOfficial

Threat intelligence: enrich IOCs (IP, domain, URL, hash), search CVEs and actors, scan SBOMs.

MCP server for AlienVault OTX threat intelligence: indicators, pulses, search, and users.

Golem Security

golem.teamOfficial

Threat-intelligence verdicts on a URL, domain or IP before a coding agent connects to it.

Enrich, search, assess, and manage threat intelligence through 80+ typed MCP tools.

Autonomous Anomaly Detection & Threat Intelligence platform on high-dimensional Kaggle cloud telemetry dataset with multi-backbone models (Isolation Forest…

Cybersecurity MCP server for URL scanning, threat intelligence, and domain reputation.

34 WHOIS, DNS, IP, threat intelligence, email, and bulk tools for AI agents via WhoisXML API.

Real-time threat intelligence lookups and IOC parsing from your self-hosted Polarity instance.

Author, validate, test, and deploy YARA-L 2.0 detection rules and evaluate end-to-end detection coverage gaps in Google SecOps.

Collects and synthesizes open-source intelligence (OSINT) about threat actors, malicious infrastructure, and attack campaigns using publicly available data…

Build structured threat actor profiles using the 5W1H framework and the Diamond Model.

行业情报雷达：多源扫描(X/即刻/V2EX/HN) → 关键词过滤 → 趋势检测 → 每日情报简报。触发词：行业情报、竞品监控、热点扫描、情报雷达

Systematically collects, categorizes, and distributes indicators of compromise (IOCs) during and after security incidents to enable detection, blocking, and…

Evidence-readiness MCP server: validate, audit, and score briefs, memos, and evidence packs.

Safely monitor ransomware group Tor-hosted data leak sites (DLS) to collect and extract structured victim posting data, track group activity trends over time…

Apple Intelligence skills for on-device AI features including Foundation Models, Visual Intelligence, App Intents, and intelligent assistants.

Predicts regulatory features, gene structure, and expression directly from DNA sequence using Genomic Intelligence's hosted transformer DNA language models —…