Threat Intelligence Aggregator

2024

A Python command-line tool that pulls indicators of compromise from multiple open-source threat intelligence feeds (AlienVault OTX, Abuse.ch, VirusTotal), deduplicates and enriches them, and outputs a normalized report in JSON and Markdown formats. Designed for use in small SOC environments without enterprise budgets.