🧠 Threat Intelligence & IOC Research
- VirusTotal — File, URL, and domain analysis
- Shodan — Internet device and exposure search
- AbuseIPDB — IP reputation lookup
- AlienVault OTX — Community threat intel feeds
- URLScan.io — Website scanning and sandboxing
- Hybrid Analysis — Sandbox malware analysis
- Any.Run — Interactive malware detonation
- MalwareBazaar — Malware samples and hashes
- ThreatFox — IOC threat intelligence database
- ZeroDay.im — Real-time exploit and vulnerability data
🧰 Security Tools & Analysis
- MITRE ATT&CK Navigator — TTP mapping reference
- LOLBAS Project — Living-off-the-land binaries
- GTFOBins — Linux/Unix privilege escalation
- VirusShare — Malware repository (registration required)
- Censys — Internet asset and host intelligence
- GreyNoise — Scanner and actor intelligence
- Have I Been Pwned — Breach lookup by email
☁️ Microsoft & Azure Service Health
- Microsoft 365 Service Health — Status across Office apps
- Azure Service Health — Regional Azure outage dashboard
- Microsoft Teams Service Health — Teams outage & reliability
- Exchange Online Health — Exchange Online service status
- Microsoft Security Advisories — Patch & CVE tracking
🌩️ Multi-Cloud & SaaS Outage Dashboards
- AWS Service Health Dashboard — Regional AWS service incidents
- Google Workspace Status — Gmail, Drive, Meet, etc.
- Cloudflare Status — CDN, DNS, and edge network issues
- GitHub Status — Repo and Actions outages
- Slack Status — Messaging and integration issues
- Zoom Service Status — Meeting & API service uptime
🧭 Incident Response & Threat Intel Feeds
- The DFIR Report — Real-world intrusion reports
- Unit42 (Palo Alto) — APT and malware research
- Mandiant Threat Intel — APT profiles and malware write-ups
- CrowdStrike Blog — Threat actor insights
- Microsoft Sentinel GitHub — Detection rules & KQL examples
- FBI IC3 — Cybercrime reporting and alerts
- CISA Alerts & Advisories — Federal cybersecurity guidance