This repository is a comprehensive collection of indicators of compromise (IOCs) published by ESET Research, covering a wide range of malware families, APT campaigns, and cyber threats. It is organized into per-campaign directories, each typically containing a README.adoc with contextual documentation and tables of IOCs, hash lists (MD5, SHA1, SHA256), and often detection rules in YARA, Sigma, or Snort formats, as well as MISP events for structured threat intelligence sharing. The data is derived from ESET's own investigations and is intended for use by security analysts, threat hunters, and automated detection systems. The repository's architecture is a flat monorepo with no application code; it is purely a data publication. Key entry points include the README.adoc files that serve as human-readable indexes, and machine-readable artifacts such as YARA rules, Sigma rules, Snort rules, and MISP JSON exports. The repository also includes a few standalone Python scripts for malware analysis (e.g., Turla Carbon tool, SparroWocky extractor) and a Volatility 2 plugin for Linux/Rakos detection, though these are tightly coupled to specific investigations and may require legacy dependencies. External dependencies are minimal: the Python scripts require Python 2 or 3 with specific libraries (e.g., pycrypto for carbon_tool.py), and the Volatility 2 plugin requires the Volatility 2 framework. The core data (IOCs, rules, MISP events) is self-contained and can be used immediately upon cloning. The repository is licensed under BSD 2-Clause, allowing broad reuse. Overall, this is a valuable resource for threat intelligence, with well-structured and consistently formatted data. However, some IOCs may be stale, and the supporting tools are not actively maintained. The detection rules are static snapshots and may require tuning for modern environments. Despite these limitations, the repository demonstrates high craftsmanship in data organization and provides reusable components for detection engineering and threat research.