AugmentedSecurityForce / -HOW-TO-Create_a_SOC_LABLinks
Create a SOC lab with SIEM, AD, Workstation, Firewall, Sysmon, IPS. Step by Step
☆30Updated 3 years ago
Alternatives and similar repositories for -HOW-TO-Create_a_SOC_LAB
Users that are interested in -HOW-TO-Create_a_SOC_LAB are comparing it to the libraries listed below
Sorting:
- A list of resources to build a information security team.☆13Updated 4 years ago
- Useful resources about phishing email analysis☆86Updated 10 months ago
- Repository resource for threat hunter☆158Updated 7 years ago
- Scripts and piece of codes used for Active Directory configuration☆82Updated 2 years ago
- M365 Defender SOC Playbooks☆24Updated 2 years ago
- A runbook for handling security incidents in cooperation with 0xsyr0☆52Updated 3 years ago
- A really good DFIR automation for collecting and analyzing evidence designed for cybersecurity professionals.☆160Updated 8 months ago
- SIEM Cheat Sheet☆77Updated 2 years ago
- Domain Response is a tool that is designed to help you automate the investigation for a domain. This tool is specificly designed to autom…☆50Updated 3 months ago
- ☆84Updated 3 years ago
- Some Threat Hunting queries useful for blue teamers☆131Updated 3 years ago
- ☆61Updated 2 years ago
- Completely Risky Active-Directory Simulation Hub☆102Updated 2 years ago
- A collection of scripts, tools. and configs for various OS'es and applications, all free and or open-source, to assist in impromptu Blue-…☆106Updated 2 years ago
- VirtualGHOST Detection Tool☆101Updated 2 weeks ago
- MAD ATT&CK Defender: ATT&CK Adversary Emulation Repository☆127Updated 2 years ago
- Purpleteam scripts simulation & Detection - trigger events for SOC detections☆192Updated last year
- Blue Team detection lab created with Terraform and Ansible in Azure.☆172Updated last year
- Ransomware simulation script written in PowerShell. Useful for testing your defenses and backups against real ransomware-like activity in…☆238Updated last year
- ☆34Updated 2 years ago
- ThreatSeeker: Threat Hunting via Windows Event Logs☆123Updated 2 years ago
- Cyber Range including Velociraptor + HELK system with a Windows VM for security testing and R&D. Azure and AWS terraform support.☆143Updated 3 years ago
- Welcome to Project KillChain, a comprehensive GitHub repository for Red and Blue Teams. This repository houses tools, scripts, technique…☆110Updated last year
- ☆74Updated last week
- Audit tool for Active Directory. Automates a lot of checks from a pentester perspective.☆177Updated 5 months ago
- A collection of various SIEM rules relating to malware family groups.☆70Updated last year
- Pwnspoof repository☆264Updated 2 years ago
- This project aims to bridge the gap between Microsoft Attack Surface Reduction (ASR) rules and MITRE ATT&CK by mapping ASR rules to their…☆29Updated last year
- Provides an advanced baseline to implement a secure Windows auditing strategy on Windows OS.☆57Updated 6 months ago
- An offline Phishing Email Analyzer. Enabling non-techies to analyze phishing emails automatically!☆63Updated 2 years ago