CTI · tier 4

Daily STIX snapshots

Immutable daily bundles of the full intelligence state: curated IOCs (STIX 2.1 indicators), CTI records (threat actors, malware, campaigns), and every feed format. Each snapshot is date-stamped with a sha256 manifest so defenders can pin exactly what they ingested. The current live feeds live at /cti/iocs/.

Latest — 2026-10-14

• 218 IOCs (ipv4 115, domain 95, sha256 8) · 1077 STIX objects · 848 CTI records
• stix-bundle.json sha256 a48a415926bf0c40…
• iocs.json · iocs.csv · iocs.txt · manifest.json

Archive