omok314159/opencti-omo

OpenCTI is an open‑source Cyber Threat Intelligence Platform that organizes, stores, and visualizes both technical (e.g., TTPs, observables) and non‑technical threat data—such as attribution, victimology, and source provenance—using a STIX‑2‑based schema, a GraphQL API, and a web UI. It is aimed at security analysts, threat‑intel teams, and enterprises that need to aggregate, link, and explore threat intelligence from sources like MISP, TheHive, MITRE ATT&CK, and custom data feeds. The project offers Community and Enterprise editions, with connectors and export formats to integrate seamlessly into existing security stacks.