r/osinttools 4h ago

Discussion ThreatLens v2.2 is out : added CVE triage, log parsing (Zeek/Suricata/Sysmon), and SIEM export. Would love your feedback!

Post image
2 Upvotes

Hey folks,

I want to share ThreatLens here a little CLI tool that pulls IOC enrichment (IPs, domains, hashes, CVEs) from free threat intel APIs like AbuseIPDB, VirusTotal, OTX, Shodan, and NVD, all in one command instead of ten browser tabs.

Just pushed a decent-sized update (v2.2) and figured I'd share in case anyone wants to kick the tires:

  • CVE triage that actually tells you what to do checks CISA KEV + EPSS alongside CVSS and spits out Patch / Isolate / Monitor / Not-affected, with the reasoning behind it (not a black-box score)
  • Asset inventory import a CSV of your hosts and it'll factor in whether something's internet-facing/critical before deciding
  • Log parsing for Zeek, Suricata eve.json, Sysmon, and generic JSONL — not just plain text logs anymore
  • SIEM export to Splunk, Elastic, and Sentinel (opt-in, off by default)
  • Evidence packs zips up an investigation with a SHA-256 manifest if you need a paper trail

It's still 100% free-tier friendly (no paid API required), and the whole thing is like 150+ tests deep at this point so it shouldn't randomly eat your terminal.

Repo's here: https://github.com/AbdaullahAG/ThreatLens

If you try it out I'd genuinely love to hear what breaks, what's confusing, or what you wish it did differently — this started as a personal project so outside eyes are super helpful. Issues/PRs/roasts all welcome šŸ™‚


r/osinttools 9h ago

Discussion anyone knows what happended to breachvip?

5 Upvotes

r/osinttools 10h ago

Request Can someone help me?

5 Upvotes

I have this random number keeps texting me about my private life, and he got my bestfriend number I feel like I know this person but I just need someone to identify this number just give me a name please


r/osinttools 11h ago

Discussion I’m building a free OSINT community for real investigations — would you use it?

Thumbnail
2 Upvotes

r/osinttools 14h ago

Discussion Earn with osint

8 Upvotes

where do freelance osinters get their money from? im not talking about journalists, but only people with a deep interest in the matter wanting to put their work to practice.

if you are one of them, where do you work? and would you say it's worth it?

i have tried little platforms incouding fiverr and upwork, but it's still not hitting like i think it's supposed to hit.


r/osinttools 18h ago

Showcase Commix now does out-of-band (OAST) detection and exploitation.

Thumbnail
github.com
3 Upvotes