Cti Python Packages

stix2-patterns

OASIS TC Open Repository: Validate patterns used to express cyber observable content in STIX Indicators

stix2

OASIS TC Open Repository: Python APIs for STIX 2

pycti

Open Cyber Threat Intelligence Platform

mitreattack-python

A python module for working with ATT&CK

taxii2-client

OASIS TC Open Repository: TAXII 2 Client Library Written in Python

stix2-validator

OASIS TC Open Repository: Validator for STIX 2.0 JSON normative requirements and best practices

sherlock-project

Hunt down social media accounts by username across social networks

stix2-elevator

OASIS Cyber Threat Intelligence (CTI) TC Open Repository: Convert STIX 1.2 XML to STIX 2.x JSON

cabby

TAXII client implementation from EclecticIQ

misp-lib-stix2

OASIS TC Open Repository: Python APIs for STIX 2

greenswitch

Battle proven FreeSWITCH Event Socket Protocol client implementation with Gevent

medallion

OASIS TC Open Repository: TAXII 2 Server Library Written in Python

zettelforge

Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents

mcp-cyberbro

Using MCP is fun with Cyberbro!

misp-modules

Modules for expansion services, enrichment, import and export in MISP and other tools.

stix2-generator

OASIS Cyber Threat Intelligence (CTI) TC: A tool for generating STIX content for prototyping and testing. https://github.com/oasis-open/cti-stix-generator

opentaxii

TAXII server implementation in Python from EclecticIQ

sylva

Simplify the link between social and real identities

mitreattackscrapper

A simple scrapper for MITRE ATT&CK information written in Python3.

stix2-slider

OASIS TC Open Repository: The repository cti-stix-slider supports development of a Python application to convert STIX 2.0 content to STIX 1.x content

xforce

IBM Security utilitary library in python. Search and query all sources: threat_activities and groups, malware_analysis, industries

exosip2ctypes

libeXosip2 Python wrapper

mallorymcp

Mallory - Cyber Threat Intelligence MCP Server

stidantic

A Pydantic-based Python library for parsing, validating, and creating STIX 2.1 cyber threat intelligence data.