TwiTi, a tool for extracting IOCs from tweets, can collect a large number of fresh, accurate IOCs.
TwiTi does
For more details please refer to our paper,
“#Twiti: Social Listening for Threat Intelligence” (TheWebConf 2021)
Also, you can find supplementary materials of the paper in data directory.
Requirements
Python
pip install -r requirements.txt
Python 3.7.0
Python 3.7.0 was the initial feature release of Python 3.7.
Note
There are now newer bugfix releases of Python 3.7 that supersede 3.7.0 and Python 3.8 is now the latest feature release of Python 3. Get the latest releases of 3.7.x and 3.8.x here. We plan to continue to provide bugfix releases for 3.7.x until mid 2020 and security fixes until mid 2023.
Among the major new features in Python 3.7 are:
Please see What’s New In Python 3.7 for more information.
More resources
Windows users
macOS users
Full Changelog
Files
Version | Operating System | Description | MD5 Sum | File Size | GPG |
---|---|---|---|---|---|
Gzipped source tarball | Source release | 41b6595deb4147a1ed517a7d9a580271 | 22745726 | SIG | |
XZ compressed source tarball | Source release | eb8c2a6b1447d50813c02714af4681f3 | 16922100 | SIG | |
macOS 64-bit/32-bit installer | macOS | for Mac OS X 10.6 and later | ca3eb84092d0ff6d02e42f63a734338e | 34274481 | SIG |
macOS 64-bit installer | macOS | for OS X 10.9 and later | ae0717a02efea3b0eb34aadc680dc498 | 27651276 | SIG |
Windows help file | Windows | 46562af86c2049dd0cc7680348180dca | 8547689 | SIG | |
Windows x86-64 embeddable zip file | Windows | for AMD64/EM64T/x64 | cb8b4f0d979a36258f73ed541def10a5 | 6946082 | SIG |
Windows x86-64 executable installer | Windows | for AMD64/EM64T/x64 | 531c3fc821ce0a4107b6d2c6a129be3e | 26262280 | SIG |
Windows x86-64 web-based installer | Windows | for AMD64/EM64T/x64 | 3cfdaf4c8d3b0475aaec12ba402d04d2 | 1327160 | SIG |
Windows x86 embeddable zip file | Windows | ed9a1c028c1e99f5323b9c20723d7d6f | 6395982 | SIG | |
Windows x86 executable installer | Windows | ebb6444c284c1447e902e87381afeff0 | 25506832 | SIG | |
Windows x86 web-based installer | Windows | 779c4085464eb3ee5b1a4fffd0eabca4 | 1298280 | SIG |
NER
TwiTi utilizes NER model for text processing. NER model should be built before run.
Please refer to ner/README.md for more information.
Run commands below in TwiTi
directory
python -m ioc_extractor –help
Tweet classification
python -m classifier –help
shadow-rs is a Windows kernel rootkit written in Rust, demonstrating advanced techniques for kernel manipulation…
Extract and execute a PE embedded within a PNG file using an LNK file. The…
Embark on the journey of becoming a certified Red Team professional with our definitive guide.…
This repository contains proof of concept exploits for CVE-2024-5836 and CVE-2024-6778, which are vulnerabilities within…
This took me like 4 days (+2 days for an update), but I got it…
MaLDAPtive is a framework for LDAP SearchFilter parsing, obfuscation, deobfuscation and detection. Its foundation is…