Recorded Future
About Yeti
Yeti is a forensics intelligence platform and pipeline designed for DFIR teams. It stores technical and tactical CTI data such as observables, TTPs, and campaigns from internal or external systems.
The platform allows users to bulk search observables to assess threat nature and find it on a system, or focus on a threat to list TTPs, malware, and forensic artifacts. It provides a web API for automating queries and enrichment, and exports data in user-defined formats for ingestion by third-party applications.
Key features
- Store and manage forensics intelligence including DFIQ objects, forensic artifact definitions, Sigma and Yara rules, and reusable queries
- Bulk search observables to get a guess on the nature of a threat and how to find it on a system
- Focus on a threat to list all TTPs, malware, and related forensic artifacts
- Incorporate own data sources, analytics, and logic
- Provide a web API to automate queries and enrichment
- Export data in user-defined formats for ingestion by third-party applications
Good fit for
- Answering where an artifact has been seen before
- Searching for IOCs related to a threat in a timeline
Yeti: questions and answers
- What is Yeti used for?
- Yeti is a platform that stores and manages forensics intelligence, enabling bulk search of observables and threat-focused analysis. It is a good fit for answering where an artifact has been seen before and searching for IOCs related to a threat in a timeline.
- Is Yeti open source?
- Yes. Yeti is open source under the Apache-2.0 licence. Its source code is on GitHub at yeti-platform/yeti and is written mainly in Python.
- Is Yeti free?
- Yes. Yeti is open source, so the software itself is free to use.
- Can I self-host Yeti?
- Yes. Yeti can be self-hosted on your own server or infrastructure.
- What is Yeti an alternative to?
- Yeti is an open-source alternative to Recorded Future. Other open-source alternatives to Recorded Future include MISP, OpenCTI and CRITs.
- Is Yeti actively maintained?
- Yes. The most recent commit to Yeti was on 9 October 2026, and the latest release is 2.12.0, published on 2 October 2026. The project has 2k stars on GitHub.
