If you have been monitoring the open source threat intelligence communities the past year, you might have heard of this malware already, & probably need no introduction. However, its just as important ...

This repo is to demonstarte and explain how to automate threatfeed integration for Rapid7's InsightIDR (SIEM). InsightIDR natively does not support taxii-feeds(taxii-urls) in their product. That means ...