2.8 KiB
2.8 KiB
Threat Hunting & Intel / Reputation Tools
Online services and scanners for URL/domain/file reputation checking, malware analysis, IOC lookup, threat intelligence enrichment, and reconnaissance during cyber threat hunting or incident response. Many of these are used daily for quick triage of suspicious indicators.
| Name | Vendor/Webpage | Brief Description | Tags | Creation Date |
|---|---|---|---|---|
| AbuseIPDB | https://www.abuseipdb.com/ | Database and API for reporting/checking abusive IP addresses and reputation. | ip-reputation, abuse, threat-intel, blacklist | 2013 |
| AlienVault OTX | https://otx.alienvault.com/ | Open Threat Exchange for sharing and searching IOCs and pulses. | threat-intel, ioc, community, otx | 2015 |
| Any.Run | https://any.run/ | Interactive online malware sandbox for real-time threat analysis and hunting. | malware, sandbox, interactive, threat-hunting | 2016 |
| GreyNoise | https://www.greynoise.io/ | Distinguishes internet background noise from targeted threats and scans. | threat-intel, noise-filter, ip-reputation, hunting | 2018 |
| Hybrid Analysis | https://www.hybrid-analysis.com/ | Free automated malware analysis sandbox with Falcon Sandbox backend. | malware, sandbox, analysis, threat-hunting | 2015 |
| Joe Sandbox | https://www.joesandbox.com/ | Advanced behavioral malware analysis with detailed reports and IOC extraction. | malware, sandbox, behavioral, analysis | 2011 |
| Talos Intelligence | https://talosintelligence.com/ | Cisco threat intelligence portal with reputation, IOC search, and blog feeds. | threat-intel, reputation, cisco, ioc | 2013 |
| urlscan.io | https://urlscan.io/ | Automated website scanning with screenshots, DOM analysis, and threat detection. | recon, url-scanner, sandbox, threat-hunting | 2016 |
| urlvoid | https://www.urlvoid.com/ | Checks website reputation against blacklists for malware, phishing, and spam. | reputation, url-scanner, blacklist, threat-intel | 2010 |
| VirusTotal | https://www.virustotal.com/ | Analyzes files, URLs, domains, and IPs with 70+ antivirus engines and scanners. | threat-intel, malware, url-scanner, ioc, reputation | 2004 |