Threat Intelligence Integrations — Defensive Security
Integrations for threat intelligence APIs — indicators of compromise, reputation checking, and SIEM enrichment.
Built with Python, MISP, IBM QRadar, REST APIs
Automation
Security Automation Scripts
Python and Bash scripts for vulnerability scanning, threat intelligence, security monitoring, and repetitive security workflows.
| Category | Automation |
|---|---|
| Technologies | Python, Bash, REST APIs |
| Links | source |
Overview
A growing collection of scripts that automate the repetitive parts of security work: launching and parsing scans, checking indicators against reputation services, watching for change, and turning raw tool output into something a human can act on.
Problem
A large share of day-to-day security work is repetitive: run the scan, parse the output, check the hash, update the tracker. Every manual repetition costs time and invites mistakes.
Solution
Small, single-purpose scripts that each automate one workflow end to end, designed to be chained together and scheduled rather than run by hand.
Key features
- Vulnerability scan orchestration and result parsing
- IOC and reputation lookups against threat intelligence APIs
- Monitoring and change-detection helpers
- Report-friendly output formats
Lessons learned
The best automation target is the task you did three times this week — not the grand platform you might need next year.
Related projects
SOC Register — Defensive Security
A security operations management application for tracking SOC activities, incidents, users, roles, and operational records.
Built with TypeScript, Next.js, PostgreSQL, RBAC
PassGuardJS — Open Source
An open-source JavaScript and TypeScript password strength and password policy validation library.
Built with TypeScript, JavaScript, npm