ThreatIngestor

What the README says you get

• API
  SQS integrationfit seamlessly into any existing workflow with SQS, Beanstalk, and custom plugins
• API
  Beanstalk integrationfit seamlessly into any existing workflow with SQS, Beanstalk, and custom plugins
• Content
  RSS feed sourcewatch Twitter, RSS feeds, sitemap (XML) feeds, or other sources
• Content
  Sitemap feed sourcewatch Twitter, RSS feeds, sitemap (XML) feeds, or other sources
• Other
  Threat feed aggregationextract and aggregate IOCs from threat feeds
• Other
  ThreatKB integrationIntegrates out-of-the-box with ThreatKB and MISP
• Other
  MISP integrationIntegrates out-of-the-box with ThreatKB and MISP
• Other
  Custom pluginsfit seamlessly into any existing workflow with SQS, Beanstalk, and custom plugins
• Other
  Twitter sourcewatch Twitter, RSS feeds, sitemap (XML) feeds, or other sources
• Other
  YARA signature extractionextract meaningful information such as malicious IPs/domains and YARA signatures
• Other
  Git repository sourceGit repositories
• Other
  GitHub repository searchGitHub repository search
• Other
  Gists by usernameGists by username

Extracted from the kit's README by a local AI model (deepseek-flash) on Sep 29, 2026. Every item is checked against an exact README quote; 1 unverifiable item was discarded. A README claim is the maker's description, not something we tested.