taranis-ai/taranis-ai
Taranis AI is an open-source intelligence (OSINT) tool that leverages AI and NLP to gather, analyze, and structure information from diverse sources for situational analysis and threat intelligence.
Awesome AI for Infra › Threat Intelligence
thalesgroup-cert/Watcher
Watcher is an open-source, AI-powered platform built with Django and React JS, focusing on cybersecurity threat intelligence and hunting. Its core purpose is to help security operations teams discover, monitor, and analyze emerging cyber threats. Key features include AI-driven threat intelligence, which transforms raw data into actionable insights through automated weekly digests of top cybersecurity topics, real-time alerts for breaking news, and on-demand summaries for security keywords. The platform also provides continuous CVE and ransomware intelligence by correlating external data sources and offering keyword-based watch rules for targeted alerts. Watcher excels in emerging threat detection by monitoring RSS feeds from various CERTs and national cybersecurity centers. It offers tools for legitimate domain management, information leak monitoring across multiple platforms, and malicious domain surveillance, including changes in IP addresses and web content. Suspicious domain detection leverages techniques like Domain Generation Algorithm (DGA) detection via dnstwist and Certificate Transparency monitoring through certstream to identify typosquatting and newly registered malicious domains. The platform integrates with TheHive for incident response and MISP for threat intelligence sharing, and includes smart notification systems for critical findings.
https://github.com/thalesgroup-cert/Watcher