Repository files navigation

Curated Intelligence is working with analysts from around the world to provide useful information to organisations in Ukraine looking for additional free threat intelligence. Slava Ukraini. Glory to Ukraine. (Blog |Twitter |LinkedIn)

• Timeline of 2022 Threat Reports

  • January Threat Reports

  • February Threat Reports

  • March Threat Reports

  • April Threat Reports

  • May Threat Reports

  • June Threat Reports

  • July Threat Reports

  • August Threat Reports

  • September Threat Reports

  • October Threat Reports

  • November Threat Reports

  • December Threat Reports

• Timeline of 2023 Threat Reports

  • January Threat Reports

  • February Threat Reports

  • April Threat Reports

  • May Threat Reports

  • June Threat Reports

• Vendor Support

• Vetted OSINT Sources

• Miscellaneous Resources

• Equinix Threat Analysis Center (ETAC) contributions:

  • ContextualizedIndicators of Compromise (IOCs) by ETAC(Last updated 25 March 2022)
  • Contextualized CERT-UA IOCs - seehere(Last updated 28 March 2022)
  • VettedYARA rule collection by ETAC(Last updated 4 April 2022)
  • Graphic of a Timeline of Russia-Ukraine Cyberwar(Last updated 14 March 2022)
  • Graphic of a Map of Russia-Ukraine Cyberwar(Last updated 3 March 2022)

• KPMG-Egyde Contributions:

  • Added loosely-vettedIOC Threat Hunt Feeds (h/t0xDISREL)(Last updated 7 April 2022)
  • IOCs shared by these feeds areLOW-TO-MEDIUM CONFIDENCE we strongly recommend NOT adding them to a blocklist
  • These could potentially be used forTHREAT HUNTING and could be added to aWATCHLIST
  • IOCs are generated inMISP COMPATIBLE CSV format
  • AdditionalThreat Hunt Feed for recently registered Ukrainian domain names (h/t DomainTools)
  • AdditionalThreat Hunt Feed for threat groups targeting Ukraine (h/t RecordedFuture)
  • Ukrainain organizations offered byAccess and Data Brokers on underground forums

Curated Inteldoes not support, encourage, partake, or condone hacking, attacking or targeting users of any kind. This information isclearly meant tohelp cybersecurity teamssupporting Ukraine still doing their jobs while dealing with the Russian invasion.