{
  "edgeTypes": {
    "manages": {
      "color": "#8aa0c8",
      "direction": "forward",
      "hideLabel": true,
      "label": "manages or co-manages",
      "width": 2
    }
  },
  "edges": [
    {
      "from": "circl",
      "to": "misp",
      "type": "manages"
    },
    {
      "from": "circl",
      "to": "vulnerability-lookup",
      "type": "manages"
    },
    {
      "from": "circl",
      "to": "pandora-analysis",
      "type": "manages"
    },
    {
      "from": "circl",
      "to": "lookyloo",
      "type": "manages"
    },
    {
      "from": "circl",
      "to": "ail-project",
      "type": "manages"
    },
    {
      "from": "circl",
      "to": "hashlookup",
      "type": "manages"
    },
    {
      "from": "circl",
      "to": "rulezet",
      "type": "manages"
    },
    {
      "from": "circl",
      "to": "pivotick",
      "type": "manages"
    },
    {
      "from": "circl",
      "to": "gcve-eu",
      "type": "manages"
    },
    {
      "from": "circl",
      "to": "cve-search",
      "type": "manages"
    },
    {
      "from": "circl",
      "to": "typosquatter",
      "type": "manages"
    },
    {
      "from": "circl",
      "to": "kunai-project",
      "type": "manages"
    },
    {
      "from": "circl",
      "to": "d4-project",
      "type": "manages"
    },
    {
      "from": "circl",
      "to": "ngsoti",
      "type": "manages"
    },
    {
      "from": "circl",
      "to": "neolea",
      "type": "manages"
    },
    {
      "from": "circl",
      "to": "draugnet",
      "type": "manages"
    },
    {
      "from": "circl",
      "to": "fanything-project",
      "type": "manages"
    },
    {
      "from": "circl",
      "to": "flowintel",
      "type": "manages"
    },
    {
      "from": "circl",
      "to": "cerebrate-project",
      "type": "manages"
    },
    {
      "from": "circl",
      "to": "skillaegis",
      "type": "manages"
    },
    {
      "from": "circl",
      "to": "bintriage",
      "type": "manages"
    }
  ],
  "meta": {
    "description": "The GitHub organisations managed or co-managed by CIRCL, the CERT for the private sector, communes and non-governmental entities in Luxembourg, as listed on https://new.circl.lu/projects/. For each organisation: its logo, its description and website from GitHub, its most starred repository and its most used topics. GitHub data of 2026-09-23.",
    "linkDistance": 300,
    "title": "CIRCL GitHub organisations"
  },
  "nodeTypes": {
    "cert": {
      "borderWidth": 0,
      "color": "#ffffff",
      "imageFit": "contain",
      "label": "CERT",
      "labelBackground": "none",
      "labelFont": "sans",
      "labelSize": 22,
      "shape": "circle",
      "size": 70
    },
    "organisation": {
      "borderWidth": 0,
      "color": "#ffffff",
      "imageFit": "contain",
      "label": "GitHub organisation",
      "labelBackground": "none",
      "labelFont": "sans",
      "labelSize": 15,
      "shape": "circle",
      "size": 36
    }
  },
  "nodes": [
    {
      "description": "CIRCL is the CERT (Computer Emergency Response Team/Computer Security Incident Response Team) for the private sector, communes and non-governmental entities.",
      "details": {
        "archived_repositories": 3,
        "email": "info@circl.lu",
        "followers": 259,
        "github_organisation": "https://github.com/CIRCL",
        "location": "Luxembourg",
        "most_starred_repositories": [
          "Circlean (487 stars)",
          "url-abuse (148 stars)",
          "bgp-ranking (116 stars)",
          "potiron (88 stars)",
          "PyPDNS (82 stars)"
        ],
        "on_github_since": "2010-11-05",
        "own_repositories": 65,
        "public_repositories": 80,
        "stars_across_repositories": 3275
      },
      "github": "CIRCL/Circlean",
      "githubInfo": {
        "archived": false,
        "description": "USB key cleaner",
        "fetchedAt": "2026-09-23T14:21:17.374Z",
        "forks": 71,
        "fullName": "CIRCL/Circlean",
        "homepage": "https://www.circl.lu/projects/CIRCLean/",
        "issues": 41,
        "language": "Python",
        "license": "BSD-3-Clause",
        "pushedAt": "2023-05-24T09:12:57Z",
        "stars": 487,
        "topics": [
          "security",
          "usb-cleaner",
          "usb-devices",
          "usb-keys"
        ],
        "url": "https://github.com/CIRCL/Circlean"
      },
      "graph": "/projects/organisations/circl/",
      "id": "circl",
      "image": "/assets/images/organisations/circl.png",
      "label": "CIRCL",
      "links": [
        {
          "label": "GitHub organisation",
          "url": "https://github.com/CIRCL"
        }
      ],
      "tags": [
        "dfir",
        "security",
        "network-analysis",
        "yara",
        "yara-rules"
      ],
      "type": "cert",
      "url": "https://www.circl.lu"
    },
    {
      "description": "MISP Project - Open Source Threat Intelligence Platform \u0026 Open Standards For Threat Information Sharing",
      "details": {
        "archived_repositories": 1,
        "email": "info@misp-project.org",
        "followers": 1172,
        "github_organisation": "https://github.com/MISP",
        "location": "Worldwide",
        "most_starred_repositories": [
          "MISP (6547 stars)",
          "misp-warninglists (650 stars)",
          "misp-galaxy (641 stars)",
          "PyMISP (492 stars)",
          "misp-training (440 stars)"
        ],
        "on_github_since": "2013-04-12",
        "own_repositories": 99,
        "public_repositories": 107,
        "stars_across_repositories": 12748
      },
      "github": "MISP/MISP",
      "githubInfo": {
        "archived": false,
        "description": "MISP (core software) - Open Source Threat Intelligence and Sharing Platform",
        "fetchedAt": "2026-09-23T14:21:17.374Z",
        "forks": 1637,
        "fullName": "MISP/MISP",
        "homepage": "https://www.misp-project.org/",
        "issues": 2923,
        "language": "PHP",
        "license": "AGPL-3.0",
        "pushedAt": "2026-09-23T09:16:13Z",
        "stars": 6547,
        "topics": [
          "cti",
          "cybersecurity",
          "fraud-detection",
          "fraud-management",
          "fraud-prevention",
          "information-exchange",
          "information-security",
          "information-sharing",
          "intelligence",
          "malware-analysis",
          "misp",
          "security",
          "stix",
          "threat-analysis",
          "threat-hunting",
          "threat-intel",
          "threat-intelligence",
          "threat-intelligence-platform",
          "threat-sharing",
          "threatintel"
        ],
        "url": "https://github.com/MISP/MISP"
      },
      "graph": "/projects/organisations/misp/",
      "id": "misp",
      "image": "/assets/images/organisations/misp.png",
      "label": "MISP",
      "links": [
        {
          "label": "GitHub organisation",
          "url": "https://github.com/MISP"
        }
      ],
      "tags": [
        "misp",
        "threat-intelligence",
        "information-exchange",
        "cti",
        "information-sharing"
      ],
      "type": "organisation",
      "url": "https://www.misp-project.org"
    },
    {
      "description": "Vulnerability-Lookup facilitates quick correlation of vulnerabilities from various sources, independent of vulnerability IDs.",
      "details": {
        "email": "info@circl.lu",
        "followers": 65,
        "github_organisation": "https://github.com/vulnerability-lookup",
        "most_starred_repositories": [
          "vulnerability-lookup (576 stars)",
          "cpe-guesser (130 stars)",
          "VulnMCP (41 stars)",
          "VulnTrain (40 stars)",
          "VulnAgent (24 stars)"
        ],
        "on_github_since": "2025-01-24",
        "own_repositories": 24,
        "public_repositories": 26,
        "stars_across_repositories": 913
      },
      "github": "vulnerability-lookup/vulnerability-lookup",
      "githubInfo": {
        "archived": false,
        "description": "Vulnerability-Lookup facilitates quick correlation of vulnerabilities from various sources, independent of vulnerability IDs, and streamlines the management of Coordinated Vulnerability Disclosure (CVD). ",
        "fetchedAt": "2026-09-23T14:21:17.374Z",
        "forks": 92,
        "fullName": "vulnerability-lookup/vulnerability-lookup",
        "homepage": "https://www.vulnerability-lookup.org",
        "issues": 72,
        "language": "Python",
        "license": "AGPL-3.0",
        "pushedAt": "2026-09-23T14:06:40Z",
        "stars": 576,
        "topics": [
          "cvd",
          "cvd-policy",
          "cve",
          "vulnerability-databases",
          "vulnerability-lookup"
        ],
        "url": "https://github.com/vulnerability-lookup/vulnerability-lookup"
      },
      "graph": "/projects/organisations/vulnerability-lookup/",
      "id": "vulnerability-lookup",
      "image": "/assets/images/organisations/vulnerability-lookup.png",
      "label": "Vulnerability-Lookup",
      "links": [
        {
          "label": "GitHub organisation",
          "url": "https://github.com/vulnerability-lookup"
        }
      ],
      "tags": [
        "vulnerability-lookup",
        "vulnerability",
        "sightings",
        "cve",
        "observations"
      ],
      "type": "organisation",
      "url": "https://www.vulnerability-lookup.org"
    },
    {
      "details": {
        "followers": 38,
        "github_organisation": "https://github.com/pandora-analysis",
        "location": "Luxembourg",
        "most_starred_repositories": [
          "pandora (284 stars)",
          "pypandora (7 stars)"
        ],
        "on_github_since": "2021-09-21",
        "own_repositories": 2,
        "public_repositories": 4,
        "stars_across_repositories": 291
      },
      "github": "pandora-analysis/pandora",
      "githubInfo": {
        "archived": false,
        "description": "Pandora is an analysis framework to discover if a file is suspicious and conveniently show the results ",
        "fetchedAt": "2026-09-23T14:21:17.374Z",
        "forks": 47,
        "fullName": "pandora-analysis/pandora",
        "homepage": "https://pandora.circl.lu/",
        "issues": 76,
        "language": "Python",
        "license": "AGPL-3.0",
        "pushedAt": "2026-09-21T20:54:41Z",
        "stars": 284,
        "topics": [
          "document-analysis",
          "document-analyzing",
          "infosec",
          "malware-detection"
        ],
        "url": "https://github.com/pandora-analysis/pandora"
      },
      "graph": "/projects/organisations/pandora-analysis/",
      "id": "pandora-analysis",
      "image": "/assets/images/organisations/pandora-analysis.png",
      "label": "Pandora Analysis",
      "links": [
        {
          "label": "GitHub organisation",
          "url": "https://github.com/pandora-analysis"
        }
      ],
      "tags": [
        "document-analysis",
        "document-analyzing",
        "infosec",
        "malware-detection",
        "pandora"
      ],
      "type": "organisation",
      "url": "https://pandora.circl.lu/"
    },
    {
      "description": "Lookyloo is a web interface allowing to scrape a website and then displays a tree of domains calling each other. ",
      "details": {
        "archived_repositories": 1,
        "followers": 64,
        "github_organisation": "https://github.com/Lookyloo",
        "most_starred_repositories": [
          "lookyloo (775 stars)",
          "PlaywrightCapture (32 stars)",
          "har2tree (14 stars)",
          "sanejs (14 stars)",
          "phishtank-lookup (12 stars)"
        ],
        "on_github_since": "2020-06-08",
        "own_repositories": 23,
        "public_repositories": 32,
        "stars_across_repositories": 908
      },
      "github": "Lookyloo/lookyloo",
      "githubInfo": {
        "archived": false,
        "description": "Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other.",
        "fetchedAt": "2026-09-23T14:21:17.374Z",
        "forks": 93,
        "fullName": "Lookyloo/lookyloo",
        "homepage": "https://www.lookyloo.eu",
        "issues": 62,
        "language": "Python",
        "pushedAt": "2026-09-22T15:40:47Z",
        "stars": 775,
        "topics": [
          "capture",
          "dfir",
          "information-security",
          "lookyloo",
          "privacy",
          "scraping",
          "web-security"
        ],
        "url": "https://github.com/Lookyloo/lookyloo"
      },
      "graph": "/projects/organisations/lookyloo/",
      "id": "lookyloo",
      "image": "/assets/images/organisations/lookyloo.png",
      "label": "Lookyloo",
      "links": [
        {
          "label": "GitHub organisation",
          "url": "https://github.com/Lookyloo"
        }
      ],
      "tags": [
        "lookyloo",
        "lookyloo-documentation",
        "information-security",
        "osint",
        "phishing"
      ],
      "type": "organisation",
      "url": "https://www.lookyloo.eu/"
    },
    {
      "description": "AIL Project is an open source project to collect and analyse data to produce security intelligence.",
      "details": {
        "archived_repositories": 1,
        "followers": 234,
        "github_organisation": "https://github.com/ail-project",
        "most_starred_repositories": [
          "ail-framework (1018 stars)",
          "lacus (119 stars)",
          "onion-lookup (65 stars)",
          "ail-yara-rules (44 stars)",
          "ail-training (39 stars)"
        ],
        "on_github_since": "2020-03-19",
        "own_repositories": 39,
        "public_repositories": 45,
        "stars_across_repositories": 1484
      },
      "github": "ail-project/ail-framework",
      "githubInfo": {
        "archived": false,
        "description": "AIL framework - Analysis Information Leak framework",
        "fetchedAt": "2026-09-23T14:21:17.374Z",
        "forks": 145,
        "fullName": "ail-project/ail-framework",
        "issues": 136,
        "language": "Python",
        "license": "AGPL-3.0",
        "pushedAt": "2026-09-22T15:19:25Z",
        "stars": 1018,
        "topics": [
          "ail-framework",
          "darkweb",
          "darkweb-scraping",
          "data-mining",
          "information-extraction",
          "information-security",
          "leak"
        ],
        "url": "https://github.com/ail-project/ail-framework"
      },
      "graph": "/projects/organisations/ail-project/",
      "id": "ail-project",
      "image": "/assets/images/organisations/ail-project.png",
      "label": "AIL Project",
      "links": [
        {
          "label": "GitHub organisation",
          "url": "https://github.com/ail-project"
        },
        {
          "label": "X / Twitter",
          "url": "https://x.com/ail_project"
        }
      ],
      "tags": [
        "ail-framework",
        "osint",
        "ail-project",
        "darkweb",
        "lacus"
      ],
      "type": "organisation",
      "url": "https://www.ail-project.org/"
    },
    {
      "description": "Open source tools and standards to lookup known files",
      "details": {
        "followers": 38,
        "github_organisation": "https://github.com/hashlookup",
        "most_starred_repositories": [
          "hashlookup-forensic-analyser (130 stars)",
          "fleur (116 stars)",
          "poppy (29 stars)",
          "private-search-set (16 stars)",
          "a-ray-grass (14 stars)"
        ],
        "on_github_since": "2021-09-23",
        "own_repositories": 14,
        "public_repositories": 18,
        "stars_across_repositories": 361
      },
      "github": "hashlookup/hashlookup-forensic-analyser",
      "githubInfo": {
        "archived": false,
        "description": "Analyse a forensic target (such as a directory) to find and report files found and not found from CIRCL hashlookup public service - https://circl.lu/services/hashlookup/",
        "fetchedAt": "2026-09-23T14:21:17.374Z",
        "forks": 14,
        "fullName": "hashlookup/hashlookup-forensic-analyser",
        "homepage": "https://hashlookup.github.io/hashlookup-forensic-analyser/",
        "issues": 4,
        "language": "Python",
        "pushedAt": "2023-09-24T12:47:57Z",
        "stars": 130,
        "topics": [
          "bloom-filter",
          "dfir",
          "dfir-automation",
          "forensic-analysis",
          "forensics-investigations",
          "hashlookup",
          "nsrl",
          "nsrllookup"
        ],
        "url": "https://github.com/hashlookup/hashlookup-forensic-analyser"
      },
      "graph": "/projects/organisations/hashlookup/",
      "id": "hashlookup",
      "image": "/assets/images/organisations/hashlookup.png",
      "label": "Hashlookup",
      "links": [
        {
          "label": "GitHub organisation",
          "url": "https://github.com/hashlookup"
        },
        {
          "label": "X / Twitter",
          "url": "https://x.com/hashlookup_io"
        }
      ],
      "tags": [
        "hashlookup",
        "dfir",
        "bloom-filter",
        "nsrl",
        "yara"
      ],
      "type": "organisation",
      "url": "https://hashlookup.io"
    },
    {
      "description": "Community-Driven Detection Rules Platform",
      "details": {
        "followers": 12,
        "github_organisation": "https://github.com/rulezet",
        "most_starred_repositories": [
          "rulezet-core (55 stars)",
          "rulezet-cast (6 stars)",
          "rulezet-workshop (3 stars)",
          "rulezet-rulesets (1 stars)",
          "rulezet-scripts (1 stars)"
        ],
        "on_github_since": "2026-04-20",
        "own_repositories": 7,
        "public_repositories": 7,
        "stars_across_repositories": 67
      },
      "github": "rulezet/rulezet-core",
      "githubInfo": {
        "archived": false,
        "description": "Rulezet is an open-source web platform for sharing, evaluating, improving, and managing cybersecurity detection rules (YARA, Sigma, Suricata, etc). It aims to foster collaboration among professionals and enthusiasts to improve the quality and reliability of detection rules. ",
        "fetchedAt": "2026-09-23T14:21:17.374Z",
        "forks": 9,
        "fullName": "rulezet/rulezet-core",
        "homepage": "https://rulezet.org/docs/",
        "issues": 14,
        "language": "Python",
        "license": "AGPL-3.0",
        "pushedAt": "2026-09-21T12:45:58Z",
        "stars": 55,
        "topics": [
          "cti",
          "network-detection",
          "network-security",
          "threat-intelligence",
          "yara"
        ],
        "url": "https://github.com/rulezet/rulezet-core"
      },
      "graph": "/projects/organisations/rulezet/",
      "id": "rulezet",
      "image": "/assets/images/organisations/rulezet.png",
      "label": "Rulezet",
      "links": [
        {
          "label": "GitHub organisation",
          "url": "https://github.com/rulezet"
        }
      ],
      "tags": [
        "cti",
        "threat-intelligence"
      ],
      "type": "organisation",
      "url": "https://rulezet.org/"
    },
    {
      "details": {
        "followers": 4,
        "github_organisation": "https://github.com/Pivotick",
        "most_starred_repositories": [
          "Pivotick (30 stars)"
        ],
        "on_github_since": "2025-11-04",
        "own_repositories": 1,
        "public_repositories": 1,
        "stars_across_repositories": 30
      },
      "github": "Pivotick/Pivotick",
      "githubInfo": {
        "archived": false,
        "description": "Pivotick is network graph library to facilitate pivoting.",
        "fetchedAt": "2026-09-23T14:21:17.374Z",
        "forks": 6,
        "fullName": "Pivotick/Pivotick",
        "homepage": "https://pivotick.github.io/Pivotick/",
        "issues": 1,
        "language": "TypeScript",
        "pushedAt": "2026-09-17T09:02:06Z",
        "stars": 30,
        "topics": [
          "infovis",
          "network-vis",
          "network-visualization"
        ],
        "url": "https://github.com/Pivotick/Pivotick"
      },
      "graph": "/projects/organisations/pivotick/",
      "id": "pivotick",
      "image": "/assets/images/organisations/pivotick.png",
      "label": "Pivotick",
      "links": [
        {
          "label": "GitHub organisation",
          "url": "https://github.com/Pivotick"
        }
      ],
      "tags": [
        "infovis",
        "network-vis",
        "network-visualization"
      ],
      "type": "organisation",
      "url": "https://pivotick.github.io/Pivotick/"
    },
    {
      "description": "Global CVE Allocation System",
      "details": {
        "email": "info@gcve.eu",
        "followers": 52,
        "github_organisation": "https://github.com/gcve-eu",
        "most_starred_repositories": [
          "gcve.eu (58 stars)",
          "gcve (21 stars)",
          "cpe-editor (8 stars)",
          "gcve-eu-kev (7 stars)",
          "gcve.eu-directory (6 stars)"
        ],
        "on_github_since": "2025-04-16",
        "own_repositories": 13,
        "public_repositories": 15,
        "stars_across_repositories": 118
      },
      "github": "gcve-eu/gcve.eu",
      "githubInfo": {
        "archived": false,
        "description": "BCP documents and website of GCVE",
        "fetchedAt": "2026-09-23T14:21:17.374Z",
        "forks": 6,
        "fullName": "gcve-eu/gcve.eu",
        "homepage": "https://gcve.eu",
        "issues": 0,
        "language": "CSS",
        "license": "CC-BY-4.0",
        "pushedAt": "2026-09-23T05:08:40Z",
        "stars": 58,
        "url": "https://github.com/gcve-eu/gcve.eu"
      },
      "graph": "/projects/organisations/gcve-eu/",
      "id": "gcve-eu",
      "image": "/assets/images/organisations/gcve-eu.png",
      "label": "GCVE",
      "links": [
        {
          "label": "GitHub organisation",
          "url": "https://github.com/gcve-eu"
        }
      ],
      "tags": [
        "cve",
        "gcve"
      ],
      "type": "organisation",
      "url": "https://gcve.eu"
    },
    {
      "description": "Tools to perform local searches for known vulnerabilities",
      "details": {
        "archived_repositories": 1,
        "followers": 126,
        "github_organisation": "https://github.com/cve-search",
        "most_starred_repositories": [
          "cve-search (2649 stars)",
          "git-vuln-finder (428 stars)",
          "PyCVESearch (127 stars)",
          "VIA4CVE (124 stars)",
          "CVE-Search-Docker (121 stars)"
        ],
        "on_github_since": "2015-10-08",
        "own_repositories": 15,
        "public_repositories": 15,
        "stars_across_repositories": 3570
      },
      "github": "cve-search/cve-search",
      "githubInfo": {
        "archived": false,
        "description": "cve-search - a tool to perform local searches for known vulnerabilities",
        "fetchedAt": "2026-09-23T14:21:17.374Z",
        "forks": 619,
        "fullName": "cve-search/cve-search",
        "homepage": "https://www.cve-search.org/",
        "issues": 0,
        "language": "Python",
        "license": "AGPL-3.0",
        "pushedAt": "2026-09-02T10:27:05Z",
        "stars": 2649,
        "topics": [
          "common-vulnerabilities",
          "cpe",
          "cve",
          "cve-databases",
          "cve-entries",
          "cve-scanning",
          "cve-search",
          "vulnerabilities",
          "vulnerability-assessment",
          "vulnerability-detection"
        ],
        "url": "https://github.com/cve-search/cve-search"
      },
      "graph": "/projects/organisations/cve-search/",
      "id": "cve-search",
      "image": "/assets/images/organisations/cve-search.png",
      "label": "CVE Search",
      "links": [
        {
          "label": "GitHub organisation",
          "url": "https://github.com/cve-search"
        }
      ],
      "tags": [
        "cve-search",
        "cve",
        "cve-scanning",
        "software-vulnerability",
        "vulnerabilities"
      ],
      "type": "organisation",
      "url": "https://www.cve-search.org/"
    },
    {
      "description": "open source projects to find typosquatting in different sources, domain, pypi...",
      "details": {
        "email": "info@circl.lu",
        "followers": 8,
        "github_organisation": "https://github.com/typosquatter",
        "most_starred_repositories": [
          "ail-typo-squatting (109 stars)",
          "ail-typo-website (76 stars)",
          "pypi-squatting (6 stars)"
        ],
        "on_github_since": "2023-05-26",
        "own_repositories": 3,
        "public_repositories": 3,
        "stars_across_repositories": 191
      },
      "github": "typosquatter/ail-typo-squatting",
      "githubInfo": {
        "archived": false,
        "description": "Generate list of potential typo squatting domains with domain name permutation engine to feed AIL and other systems.",
        "fetchedAt": "2026-09-23T14:21:17.374Z",
        "forks": 9,
        "fullName": "typosquatter/ail-typo-squatting",
        "homepage": "https://typosquatter.github.io/ail-typo-squatting/",
        "issues": 0,
        "language": "Python",
        "license": "BSD-2-Clause",
        "pushedAt": "2025-04-30T08:47:29Z",
        "stars": 109,
        "topics": [
          "threat-intelligence",
          "typo-squatting",
          "typosquatting",
          "typosquatting-domains"
        ],
        "url": "https://github.com/typosquatter/ail-typo-squatting"
      },
      "graph": "/projects/organisations/typosquatter/",
      "id": "typosquatter",
      "image": "/assets/images/organisations/typosquatter.png",
      "label": "Typosquatter",
      "links": [
        {
          "label": "GitHub organisation",
          "url": "https://github.com/typosquatter"
        }
      ],
      "tags": [
        "threat-intelligence",
        "typosquatting",
        "typosquatting-domains",
        "misp",
        "typo-squatting"
      ],
      "type": "organisation",
      "url": "https://typosquatting-finder.circl.lu/"
    },
    {
      "details": {
        "followers": 81,
        "github_organisation": "https://github.com/kunai-project",
        "location": "Luxembourg",
        "most_starred_repositories": [
          "kunai (1091 stars)",
          "sandbox (30 stars)",
          "sandbox-ui (18 stars)",
          "pykunai (8 stars)",
          "kunai-build-docker (6 stars)"
        ],
        "on_github_since": "2024-01-19",
        "own_repositories": 12,
        "public_repositories": 15,
        "stars_across_repositories": 1163
      },
      "github": "kunai-project/kunai",
      "githubInfo": {
        "archived": false,
        "description": "Threat-hunting tool for Linux",
        "fetchedAt": "2026-09-23T14:21:17.374Z",
        "forks": 79,
        "fullName": "kunai-project/kunai",
        "homepage": "https://why.kunai.rocks",
        "issues": 15,
        "language": "Rust",
        "license": "GPL-3.0",
        "pushedAt": "2026-09-23T13:22:47Z",
        "stars": 1091,
        "topics": [
          "ebpf",
          "linux",
          "security-monitoring",
          "threat-detection",
          "threat-hunting"
        ],
        "url": "https://github.com/kunai-project/kunai"
      },
      "graph": "/projects/organisations/kunai-project/",
      "id": "kunai-project",
      "image": "/assets/images/organisations/kunai-project.png",
      "label": "Kunai Project",
      "links": [
        {
          "label": "GitHub organisation",
          "url": "https://github.com/kunai-project"
        },
        {
          "label": "X / Twitter",
          "url": "https://x.com/kunai_project"
        }
      ],
      "type": "organisation",
      "url": "https://why.kunai.rocks"
    },
    {
      "description": "Large-scale distributed sensor network project to monitor DDoS and other malicious activities.",
      "details": {
        "archived_repositories": 1,
        "followers": 49,
        "github_organisation": "https://github.com/D4-project",
        "location": "Worldwide",
        "most_starred_repositories": [
          "passive-ssh (105 stars)",
          "IPASN-History (99 stars)",
          "BGP-Ranking (82 stars)",
          "d4-core (43 stars)",
          "sensor-d4-tls-fingerprinting (37 stars)"
        ],
        "on_github_since": "2018-02-21",
        "own_repositories": 38,
        "public_repositories": 46,
        "stars_across_repositories": 535
      },
      "github": "D4-project/passive-ssh",
      "githubInfo": {
        "archived": false,
        "description": "A Passive SSH back-end and scanner.",
        "fetchedAt": "2026-09-23T14:21:17.374Z",
        "forks": 11,
        "fullName": "D4-project/passive-ssh",
        "homepage": "https://d4-project.github.io/passive-ssh/",
        "issues": 1,
        "language": "Python",
        "license": "AGPL-3.0",
        "pushedAt": "2026-05-11T11:35:52Z",
        "stars": 105,
        "topics": [
          "hassh",
          "passive-ssh",
          "passive-ssh-server",
          "ssh",
          "ssh-scanner",
          "threat-intelligence"
        ],
        "url": "https://github.com/D4-project/passive-ssh"
      },
      "graph": "/projects/organisations/d4-project/",
      "id": "d4-project",
      "image": "/assets/images/organisations/d4-project.png",
      "label": "D4 Project",
      "links": [
        {
          "label": "GitHub organisation",
          "url": "https://github.com/D4-project"
        },
        {
          "label": "X / Twitter",
          "url": "https://x.com/d4_project"
        }
      ],
      "tags": [
        "d4-project",
        "network-monitoring",
        "network-security",
        "threat-intelligence",
        "bgp"
      ],
      "type": "organisation",
      "url": "https://d4-project.org/"
    },
    {
      "details": {
        "followers": 25,
        "github_organisation": "https://github.com/ngsoti",
        "most_starred_repositories": [
          "rust-training (16 stars)",
          "misp-wazuh-workshop (9 stars)",
          "ngsoti (9 stars)",
          ".github (0 stars)"
        ],
        "on_github_since": "2024-01-23",
        "own_repositories": 4,
        "public_repositories": 4,
        "stars_across_repositories": 34
      },
      "github": "ngsoti/rust-training",
      "githubInfo": {
        "archived": false,
        "description": "Rust Training by Examples",
        "fetchedAt": "2026-09-23T14:21:17.374Z",
        "forks": 2,
        "fullName": "ngsoti/rust-training",
        "issues": 0,
        "language": "Rust",
        "pushedAt": "2025-12-17T08:30:41Z",
        "stars": 16,
        "topics": [
          "rust",
          "training",
          "training-materials"
        ],
        "url": "https://github.com/ngsoti/rust-training"
      },
      "graph": "/projects/organisations/ngsoti/",
      "id": "ngsoti",
      "image": "/assets/images/organisations/ngsoti.png",
      "label": "NGSOTI",
      "links": [
        {
          "label": "GitHub organisation",
          "url": "https://github.com/ngsoti"
        }
      ],
      "type": "organisation"
    },
    {
      "description": "Training materials for (LEA) law enforcement agency and partners",
      "details": {
        "followers": 6,
        "github_organisation": "https://github.com/neolea",
        "location": "Europe",
        "most_starred_repositories": [
          "neolea-training-materials (64 stars)",
          "misp-lea-website (0 stars)",
          "neolea-training-materials-files (0 stars)"
        ],
        "on_github_since": "2020-06-09",
        "own_repositories": 3,
        "public_repositories": 3,
        "stars_across_repositories": 64
      },
      "github": "neolea/neolea-training-materials",
      "githubInfo": {
        "archived": false,
        "description": "Open source training materials for law-enforcement and organisations interested in DFIR.",
        "fetchedAt": "2026-09-23T14:21:17.374Z",
        "forks": 6,
        "fullName": "neolea/neolea-training-materials",
        "homepage": "https://neolea.github.io/neolea-training-materials/",
        "issues": 1,
        "language": "TeX",
        "pushedAt": "2026-05-29T13:29:52Z",
        "stars": 64,
        "topics": [
          "dfir",
          "law-enforcement",
          "misp",
          "neola"
        ],
        "url": "https://github.com/neolea/neolea-training-materials"
      },
      "graph": "/projects/organisations/neolea/",
      "id": "neolea",
      "image": "/assets/images/organisations/neolea.png",
      "label": "Neolea",
      "links": [
        {
          "label": "GitHub organisation",
          "url": "https://github.com/neolea"
        }
      ],
      "tags": [
        "dfir",
        "law-enforcement",
        "misp",
        "neola"
      ],
      "type": "organisation",
      "url": "https://neolea.github.io/neolea-training-materials/"
    },
    {
      "details": {
        "followers": 5,
        "github_organisation": "https://github.com/draugnet",
        "most_starred_repositories": [
          "draugnet (21 stars)",
          "draugnetUI (6 stars)",
          "draugnet-docker (0 stars)"
        ],
        "on_github_since": "2025-06-11",
        "own_repositories": 3,
        "public_repositories": 3,
        "stars_across_repositories": 27
      },
      "github": "draugnet/draugnet",
      "githubInfo": {
        "archived": false,
        "description": "Draugnet is a lightweight, open-source tool for anonymous cyber threat reporting. Built for the MISP ecosystem, it lets users submit and track reports — no accounts, no logins, just a simple token. Supports plain text, MISP JSON, and object templates — ideal for CSIRTs, ISACs, and trusted communities. 🔐 Built for anonymity 🧩 Easy MISP integration",
        "fetchedAt": "2026-09-23T14:21:17.374Z",
        "forks": 3,
        "fullName": "draugnet/draugnet",
        "homepage": "https://github.com/draugnet/draugnet/",
        "issues": 2,
        "language": "Python",
        "license": "AGPL-3.0",
        "pushedAt": "2026-07-08T14:09:27Z",
        "stars": 21,
        "url": "https://github.com/draugnet/draugnet"
      },
      "graph": "/projects/organisations/draugnet/",
      "id": "draugnet",
      "image": "/assets/images/organisations/draugnet.png",
      "label": "Draugnet",
      "links": [
        {
          "label": "GitHub organisation",
          "url": "https://github.com/draugnet"
        }
      ],
      "type": "organisation"
    },
    {
      "description": "Fingerprint everything",
      "details": {
        "followers": 5,
        "github_organisation": "https://github.com/fanything-project",
        "most_starred_repositories": [
          "fanything (15 stars)"
        ],
        "on_github_since": "2026-06-16",
        "own_repositories": 1,
        "public_repositories": 1,
        "stars_across_repositories": 15
      },
      "github": "fanything-project/fanything",
      "githubInfo": {
        "archived": false,
        "description": "Fingerprint anything on a network perspective",
        "fetchedAt": "2026-09-23T14:21:17.374Z",
        "forks": 3,
        "fullName": "fanything-project/fanything",
        "issues": 4,
        "language": "Python",
        "license": "BSD-2-Clause",
        "pushedAt": "2026-07-13T09:53:24Z",
        "stars": 15,
        "url": "https://github.com/fanything-project/fanything"
      },
      "graph": "/projects/organisations/fanything-project/",
      "id": "fanything-project",
      "image": "/assets/images/organisations/fanything-project.png",
      "label": "FAnything Project",
      "links": [
        {
          "label": "GitHub organisation",
          "url": "https://github.com/fanything-project"
        }
      ],
      "type": "organisation"
    },
    {
      "description": "Organize your intelligence flow",
      "details": {
        "followers": 29,
        "github_organisation": "https://github.com/flowintel",
        "most_starred_repositories": [
          "flowintel (158 stars)",
          "cocktailparty (23 stars)",
          "benthos (4 stars)",
          "flowintel-templates (2 stars)",
          "flowintel-doc (1 stars)"
        ],
        "on_github_since": "2021-12-25",
        "own_repositories": 11,
        "public_repositories": 14,
        "stars_across_repositories": 190
      },
      "github": "flowintel/flowintel",
      "githubInfo": {
        "archived": false,
        "description": "An open source platform to support analysts to organise their case and tasks",
        "fetchedAt": "2026-09-23T14:21:17.374Z",
        "forks": 26,
        "fullName": "flowintel/flowintel",
        "homepage": "https://flowintel.github.io/flowintel-doc ",
        "issues": 16,
        "language": "Python",
        "license": "AGPL-3.0",
        "pushedAt": "2026-09-23T13:43:19Z",
        "stars": 158,
        "topics": [
          "case-management",
          "flowintel",
          "incident-response",
          "threatintel"
        ],
        "url": "https://github.com/flowintel/flowintel"
      },
      "graph": "/projects/organisations/flowintel/",
      "id": "flowintel",
      "image": "/assets/images/organisations/flowintel.svg",
      "label": "FlowIntel",
      "links": [
        {
          "label": "GitHub organisation",
          "url": "https://github.com/flowintel"
        }
      ],
      "tags": [
        "flowintel"
      ],
      "type": "organisation",
      "url": "https://flowintel.github.io/flowintel-doc "
    },
    {
      "description": "Cerebrate is an open-source platform meant to act as a trusted contact information provider and interconnection orchestrator for other security tools. ",
      "details": {
        "archived_repositories": 1,
        "email": "info@circl.lu",
        "followers": 15,
        "github_organisation": "https://github.com/cerebrate-project",
        "most_starred_repositories": [
          "cerebrate (93 stars)",
          "cerebrate-training (9 stars)",
          "module-collection (3 stars)",
          "cerebrate-website (1 stars)",
          "doc.cerebrate-project.org (1 stars)"
        ],
        "on_github_since": "2020-01-26",
        "own_repositories": 6,
        "public_repositories": 6,
        "stars_across_repositories": 111
      },
      "github": "cerebrate-project/cerebrate",
      "githubInfo": {
        "archived": false,
        "description": "Cerebrate is an open-source platform meant to act as a trusted contact information provider and interconnection orchestrator for other security tools.",
        "fetchedAt": "2026-09-23T14:21:17.374Z",
        "forks": 20,
        "fullName": "cerebrate-project/cerebrate",
        "homepage": "https://www.cerebrate-project.org/",
        "issues": 99,
        "language": "PHP",
        "license": "AGPL-3.0",
        "pushedAt": "2026-09-21T09:12:26Z",
        "stars": 93,
        "topics": [
          "cerebrate",
          "cerebrate-project",
          "information-sharing",
          "misp",
          "security-automation"
        ],
        "url": "https://github.com/cerebrate-project/cerebrate"
      },
      "graph": "/projects/organisations/cerebrate-project/",
      "id": "cerebrate-project",
      "image": "/assets/images/organisations/cerebrate-project.png",
      "label": "Cerebrate Project",
      "links": [
        {
          "label": "GitHub organisation",
          "url": "https://github.com/cerebrate-project"
        },
        {
          "label": "X / Twitter",
          "url": "https://x.com/cerebrateproje1"
        }
      ],
      "tags": [
        "cerebrate-project",
        "misp"
      ],
      "type": "organisation",
      "url": "https://www.cerebrate-project.org"
    },
    {
      "details": {
        "followers": 1,
        "github_organisation": "https://github.com/SkillAegis",
        "most_starred_repositories": [
          "SkillAegis (38 stars)",
          "SkillAegis-Dashboard (4 stars)",
          "SkillAegis-Editor (4 stars)"
        ],
        "on_github_since": "2025-10-23",
        "own_repositories": 3,
        "public_repositories": 3,
        "stars_across_repositories": 46
      },
      "github": "SkillAegis/SkillAegis",
      "githubInfo": {
        "archived": false,
        "description": "SkillAegis is a platform to design, run, and monitor exercise scenarios, enhancing skills in applications like MISP and training users in best practices for information management and protective tools. Its gamification system makes learning engaging, ensuring users acquire essential technical skills and adhere to industry standards.",
        "fetchedAt": "2026-09-23T14:21:17.374Z",
        "forks": 8,
        "fullName": "SkillAegis/SkillAegis",
        "issues": 1,
        "language": "HTML",
        "license": "AGPL-3.0",
        "pushedAt": "2026-07-20T11:40:22Z",
        "stars": 38,
        "url": "https://github.com/SkillAegis/SkillAegis"
      },
      "graph": "/projects/organisations/skillaegis/",
      "id": "skillaegis",
      "image": "/assets/images/organisations/skillaegis.png",
      "label": "SkillAegis",
      "links": [
        {
          "label": "GitHub organisation",
          "url": "https://github.com/SkillAegis"
        }
      ],
      "tags": [
        "scenario-creator",
        "training"
      ],
      "type": "organisation"
    },
    {
      "details": {
        "followers": 2,
        "github_organisation": "https://github.com/BinTriage",
        "on_github_since": "2026-08-18",
        "own_repositories": 0,
        "public_repositories": 5,
        "stars_across_repositories": 0
      },
      "graph": "/projects/organisations/bintriage/",
      "id": "bintriage",
      "image": "/assets/images/organisations/bintriage.png",
      "label": "BinTriage",
      "links": [
        {
          "label": "GitHub organisation",
          "url": "https://github.com/BinTriage"
        }
      ],
      "type": "organisation"
    }
  ],
  "version": 1
}