AugmentedSecurityForce / -HOW-TO-Create_a_SOC_LABLinks
Create a SOC lab with SIEM, AD, Workstation, Firewall, Sysmon, IPS. Step by Step
☆30Updated 3 years ago
Alternatives and similar repositories for -HOW-TO-Create_a_SOC_LAB
Users that are interested in -HOW-TO-Create_a_SOC_LAB are comparing it to the libraries listed below
Sorting:
- Ransomware simulation script written in PowerShell. Useful for testing your defenses and backups against real ransomware-like activity in…☆238Updated last year
- ☆34Updated 2 years ago
- Scripts and piece of codes used for Active Directory configuration☆82Updated 2 years ago
- Repository resource for threat hunter☆158Updated 7 years ago
- A list of resources to build a information security team.☆13Updated 4 years ago
- Blue Team detection lab created with Terraform and Ansible in Azure.☆175Updated last year
- ThreatSeeker: Threat Hunting via Windows Event Logs☆123Updated 2 years ago
- Welcome to Project KillChain, a comprehensive GitHub repository for Red and Blue Teams. This repository houses tools, scripts, technique…☆111Updated last year
- Useful resources about phishing email analysis☆86Updated 11 months ago
- A really good DFIR automation for collecting and analyzing evidence designed for cybersecurity professionals.☆162Updated 9 months ago
- Audit tool for Active Directory. Automates a lot of checks from a pentester perspective.☆175Updated 6 months ago
- Purpleteam scripts simulation & Detection - trigger events for SOC detections☆192Updated last year
- Completely Risky Active-Directory Simulation Hub☆102Updated 2 years ago
- A collection of scripts, tools. and configs for various OS'es and applications, all free and or open-source, to assist in impromptu Blue-…☆106Updated 2 years ago
- SIEM Cheat Sheet☆77Updated 2 years ago
- A runbook for handling security incidents in cooperation with 0xsyr0☆52Updated 3 years ago
- VirtualGHOST Detection Tool☆101Updated last month
- Some Threat Hunting queries useful for blue teamers☆131Updated 3 years ago
- A collection of various SIEM rules relating to malware family groups.☆70Updated last year
- ☆160Updated 2 years ago
- 🧰 ESXi Testing Tookit is a command-line utility designed to help security teams test ESXi detections.☆82Updated 8 months ago
- Domain Response is a tool that is designed to help you automate the investigation for a domain. This tool is specificly designed to autom…☆49Updated 2 weeks ago
- Automating EDR Testing with reference to MITRE ATTACK via Cobalt Strike [Purple Team].☆155Updated 2 years ago
- Free training course offered at Hack Space Con 2023☆137Updated 2 years ago
- ☆74Updated last week
- MAD ATT&CK Defender: ATT&CK Adversary Emulation Repository☆127Updated 2 years ago
- M365 Defender SOC Playbooks☆24Updated 2 years ago
- Pwnspoof repository☆264Updated 2 years ago
- This repo is where I store my Threat Hunting ideas/content☆87Updated 2 years ago
- A curated list of tools and resources that I use daily as a Purple-Team operator.☆92Updated 7 months ago