IntelOwl

IntelOwl is an open-source Cyber Threat Intelligence (CTI) and malware analysis platform designed to automate the collection, enrichment, and analysis of Indicators of Compromise (IOCs). It integrates multiple threat intelligence providers, malware analysis engines, and OSINT services into a centralized security analysis framework.

• Automated analysis and enrichment for IPs, domains, URLs, hashes, and malware samples.
• Integration with multiple threat intelligence, malware analysis, and OSINT platforms.
• Support for Docker-based scalable deployments with asynchronous task processing.
• REST API support, extensible plugin architecture, and SOC automation capabilities.

IntelOwl Usage:

# Switch to root user
$ sudo su

# Navigate to IntelOwl directory
$ cd IntelOwl

# Verify installed version
$ git describe --tags

  

Disclaimer: IntelOwl is provided "as is," without any warranty, express or implied. Users utilize this software at their own risk. IntelOwl is an open-source project developed and maintained by the cybersecurity community and contributors. The developers and contributors hold no responsibility for any damages, losses, security incidents, or consequences resulting from the use of this software. Users are advised to carefully review licensing terms, dependencies, integrations, and applicable cybersecurity regulations before deploying IntelOwl in production or enterprise environments.