endlessfractal / threat-intel-feed

Automated threat intel feed parsing and consolidation💻👾🤖

EndlessFractal's Threat Intel Feed

This automated feed retrieves a list of feeds from various sources, consolidates them and saves to a file called feed.xml.

Description

The script performs the following steps:

1. The script starts by importing necessary libraries and modules.
2. It contains functions for handling date and time conversions, as well as parsing dates with time zones.
3. The main part of the script combines multiple RSS feeds from given URLs:
   • It fetches articles from these feeds concurrently.
   • Combines all the fetched articles into one list.
   • Sorts the list based on the publication dates of the articles, in ascending order.
4. After combining and sorting the articles, the script creates a new RSS feed with specific metadata:
   • It sets the title and description for the new feed.
   • Provides a link to the feed.
   • Adds the most recent 20 articles to the feed.
   • Generates an XML representation of the feed.
5. Finally, the script reads a list of RSS feed URLs from 'list.txt', combines the feeds, creates a new feed with the most recent articles, and saves it to 'feed.xml'.

Usage

Just import the following link into your favorite RSS reader!

https://raw.githubusercontent.com/EndlessFractal/Threat-Intel-Feed/main/feed.xml

Sources

The script retrieves feeds from the following sources:

• AhnLab ASEC Feed
• AT&T Cybersecurity Blog
• Bitdefender Labs Blog
• Broadcom SED Blog
• CISA ICS Advisories
• CISA ICS Medical Advisories
• Cloudflare Security Blog
• CrowdStrike Blog
• Darknet Blog
• DataBreachToday
• EclecticIQ Blog
• ESET Blog
• Fortinet Threat Research Blog
• Google Project Zero Blog
• GovTech Cybersecurity Blog
• Graham Cluley's Blog
• HackerOne Blog
• Hackmageddon Blog
• IBM Security Intelligence Blog
• Infosecurity Magazine News
• Intezer Research Blog
• Kaspersky Securelist Blog
• KrebsOnSecurity Blog
• Malwarebytes Blog
• Microsoft Security Blog
• Nao-Sec Blog
• NIST Cybersecurity Insights
• Palo Alto Networks Unit 42 Blog
• Proofpoint Blog
• Recorded Future Blog
• SANS Internet Storm Center Blog
• Schneier on Security Blog
• Sebdraven's Medium Blog
• Security Affairs Blog
• SensePost Blog
• SentinelOne Blog
• SOC Prime Blog
• Sophos News Blog
• Talos Intelligence Blog
• TechRepublic Security News
• The CyberWire Blog
• The Guardian Technology Security
• The Hacker News Blog
• The Record Media Blog
• Threatpost Blog
• Troy Hunt's Blog
• US-CERT Alerts
• US-CERT Analysis Reports
• US-CERT Current Activity