Hey Fedi friends! Given the uncertainty around the future of the US federal government's ability to provide accurate, timely, and impartial cyber threat intelligence, a bunch of us have started talking about strategies to build/expand some of these capabilities independent of the government. Very early days—shaping the problem, discussing options, etc. But if you'd be interested in the conversation and willing to help organizations build CTI capability, please DM me.
@mttaggart Perhaps a good model for this is the way the Sigma Rules project (
https://github.com/SigmaHQ/sigma.git) handles community-based SIEM detection rule creation and distribution. They have a simple ontology-based yaml file structure which accommodates other standards such as STIX/TAXII and ATT&CK. While it's not the solution for impartial gathering of OSINT or OPENCTI, it could certainly aid in distribution of threat intel once gathered.

GitHub - SigmaHQ/sigma: Main Sigma Rule Repository
Main Sigma Rule Repository. Contribute to SigmaHQ/sigma development by creating an account on GitHub.
GitHub