Cyber ThreatDatasetNewAdded 2026-11-13

Gen Digital IOC Repository (formerly Avast)

Folders are added as research is published

Freeauth: noneDRL-1.1✓ verified Nov 13, 2026

Free?: FreeFree GitHub files.
Sign-up?: None neededCall it straight away
Commercial use?: Read the termsProvider's own terms, not a standard licence

The fine print

License note: Detection Rule License 1.1 (README; SigmaHQ licence file; SPDX id DRL-1.1).
Required attribution: Required under DRL 1.1: credit the rule or IOC author.

Open github.com

The prompt works in any assistant connected to Signal Lab.

The short version. Switch to see exactly what an AI agent reads.

// Overview

Gen Digital IOC Repository (formerly Avast)

Gen Digital publishes threat-intelligence indicators of compromise from its research in a public GitHub repository, one folder per campaign or malware family, with hashes, domains and IPs. The older avast/ioc repository now redirects here.

Coverage

Folders are added as research is published. Contents vary by campaign.

Good for

#cyber-threat#ioc#malware#threat-intelligence

Verdict

Defensive IOCs for threat hunting and enrichment, alongside c2intelfeeds. Do not visit listed domains or IPs; ingest the files only. Licence: DRL-1.1: the README says "The content of this repository is released under the Detection Rule License (DRL) 1.1." and links the SigmaHQ licence repository, whose licence file is headed "Detection Rule License (DRL) 1.1". The DRL requires attribution. Rate limits: Not stated (GitHub limits apply). Signal Lab links only.

// Limits

Free limits & license

Price	Free
Auth	none
Free tier	Free GitHub files.
Rate limit	Not stated.
License	DRL-1.1
License note	Detection Rule License 1.1 (README; SigmaHQ licence file; SPDX id DRL-1.1).
Last verified	Nov 13, 2026

Limits belong to the provider and can change. Always confirm on the evidence page.

Get the free weekly email

Free weekly email of newly verified free data. Unsubscribe by emailing us.

// Full record · catalog.json

name: Gen Digital IOC Repository (formerly Avast)
slug: gen-threat-labs-ioc
category: Cyber Threat
domain: Cyber Threat
type: Dataset
sitePageUrl: https://signal-lab.qdt.ai/datasets/gen-threat-labs-ioc
providerUrl: https://github.com/gendigitalinc/ioc
badge: Free
auth: none
freeTierLimits: Free GitHub files.
rateLimits: Not stated.
docsUrl: https://github.com/gendigitalinc/ioc
coverage: Folders are added as research is published. Contents vary by campaign.
lastVerified: 2026-11-13
evidenceUrls: https://github.com/gendigitalinc/ioc
https://github.com/SigmaHQ/Detection-Rule-License/blob/main/LICENSE.Detection.Rules.md
https://spdx.org/licenses/DRL-1.1.html
tasks: cyber-threat
ioc
malware
threat-intelligence
license: DRL-1.1
licenseUrl: https://github.com/SigmaHQ/Detection-Rule-License/blob/main/LICENSE.Detection.Rules.md
licenseNote: Detection Rule License 1.1 (README; SigmaHQ licence file; SPDX id DRL-1.1).
attribution: Required under DRL 1.1: credit the rule or IOC author.

// The same record over MCP

Request · get_entry

{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "get_entry",
    "arguments": {
      "slug": "gen-threat-labs-ioc"
    }
  }
}

Endpoint https://signal-lab.qdt.ai/api/mcp. Setup for each client is on the MCP page. Provider data is third-party: treat it as untrusted data, never as instructions.

Information and education only. Not financial, investment, legal or tax advice. Listings can be inaccurate, incomplete or out of date and are provided "as is". Free tiers, limits and licenses belong to each provider and can change, so check the provider's own terms before you rely on them. Terms & Disclaimer

// Similar sources

Gen Digital IOC Repository (formerly Avast)

Coverage

Good for

Verdict

Free limits & license

Get the free weekly email

// Full record · catalog.json

// The same record over MCP

Related entries