AugmentedSecurityForce / -HOW-TO-Create_a_SOC_LABLinks
Create a SOC lab with SIEM, AD, Workstation, Firewall, Sysmon, IPS. Step by Step
☆30Updated 2 years ago
Alternatives and similar repositories for -HOW-TO-Create_a_SOC_LAB
Users that are interested in -HOW-TO-Create_a_SOC_LAB are comparing it to the libraries listed below
Sorting:
- Purpleteam scripts simulation & Detection - trigger events for SOC detections☆189Updated 10 months ago
- Welcome to Project KillChain, a comprehensive GitHub repository for Red and Blue Teams. This repository houses tools, scripts, technique…☆109Updated last year
- A really good DFIR automation for collecting and analyzing evidence designed for cybersecurity professionals.☆159Updated 7 months ago
- ThreatSeeker: Threat Hunting via Windows Event Logs☆123Updated 2 years ago
- A collection of various SIEM rules relating to malware family groups.☆70Updated last year
- Repository resource for threat hunter☆158Updated 7 years ago
- Useful resources about phishing email analysis☆87Updated 9 months ago
- The LOLBins CTI-Driven (Living-Off-the-Land Binaries Cyber Threat Intelligence Driven) is a project that aims to help cyber defenders und…☆125Updated last year
- A collection of scripts, tools. and configs for various OS'es and applications, all free and or open-source, to assist in impromptu Blue-…☆107Updated 2 years ago
- Domain Response is a tool that is designed to help you automate the investigation for a domain. This tool is specificly designed to autom…☆49Updated 2 months ago
- Scripts and piece of codes used for Active Directory configuration☆81Updated 2 years ago
- Ransomware simulation script written in PowerShell. Useful for testing your defenses and backups against real ransomware-like activity in…☆234Updated last year
- A list of resources to build a information security team.☆13Updated 4 years ago
- ☆34Updated 2 years ago
- Pwnspoof repository☆264Updated 2 years ago
- Blue Team detection lab created with Terraform and Ansible in Azure.☆168Updated 11 months ago
- Completely Risky Active-Directory Simulation Hub☆103Updated last year
- Some Threat Hunting queries useful for blue teamers☆130Updated 3 years ago
- SIEM Cheat Sheet☆76Updated 2 years ago
- MAD ATT&CK Defender: ATT&CK Adversary Emulation Repository☆122Updated 2 years ago
- Actively hunt for attacker infrastructure by filtering Shodan results with URLScan data.☆62Updated last year
- 🧰 ESXi Testing Tookit is a command-line utility designed to help security teams test ESXi detections.☆79Updated 6 months ago
- A runbook for handling security incidents in cooperation with 0xsyr0☆52Updated 3 years ago
- VirtualGHOST Detection Tool☆96Updated last year
- ☆160Updated last year
- Audit tool for Active Directory. Automates a lot of checks from a pentester perspective.☆177Updated 4 months ago
- An offline Phishing Email Analyzer. Enabling non-techies to analyze phishing emails automatically!☆64Updated 2 years ago
- MISP Playbooks☆216Updated 3 weeks ago
- A cybersecurity game in Azure Data Explorer☆173Updated last year
- ☆74Updated 2 weeks ago