Repository for SOC analysts, queries to investigate, advanced hunting, sites for analysis, malware samples, courses to improve skills, IOC and monitoring.
☆161Apr 13, 2026Updated 6 months ago
Alternatives and similar repositories for soc-ressources
Users that are interested in soc-ressources are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Comprehensive SOC Analyst notes covering incident response, threat hunting, SOC workflows, and cybersecurity concepts—perfect for exam pr…☆157Feb 26, 2026Updated 8 months ago
- Online resources related to SOC Analysts. Incident investigation reference material, blogs, newsletters, good reads, books, trainings, po…☆96Oct 13, 2026Updated 3 weeks ago
- This repository is dedicated to the SOC (Security Operations Center) Analyst course. It contains all the necessary resources, notes, scri…☆17Aug 31, 2024Updated 2 years ago
- Complete SOC Analyst Training Roadmap 2026: 14 hands-on projects (SIEM, SOAR, TIP, ML) for automation-first defenders☆252Aug 28, 2026Updated 2 months ago
- A curated collection of essential resources, tools, and references for Security Operations Center (SOC) analysts.☆18Jul 29, 2026Updated 3 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Useful resources for SOC Analyst and SOC Analyst candidates.☆1,041Aug 28, 2023Updated 3 years ago
- Cybersecurity Security Operations Center (SOC) Analyst NOW, by EC-Council☆55Apr 13, 2023Updated 3 years ago
- This repository contains an organized collection of queries (CQL) designed to facilitate Threat Hunting tasks, incident investigation, an…☆15Aug 29, 2025Updated last year
- A collection of sources of documentation and best practices to build and run a SOC☆84Jan 13, 2023Updated 3 years ago
- Playbooks for SOC Analysts☆762Dec 11, 2022Updated 3 years ago
- A 30-day hands-on SOC Analyst project simulating real-world cyber attacks using ELK Stack, Mythic C2, osTicket & Elastic Defend. Covers t…☆45Jun 10, 2025Updated last year
- CrowdStrike Falcon Advanced Threat Hunting Queries☆14Aug 19, 2026Updated 2 months ago
- A powerful home-lab focused on setting up Splunk SIEM and real-world use cases. If you’re interested to become SOC Analyst(Tier 1/2) , th…☆128Apr 3, 2024Updated 2 years ago
- ☆14Feb 24, 2025Updated last year
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- A curated knowledge base to build, run and mature a SOC (including CSIRT).☆1,915Updated this week
- Enrich your investigations on IPs, Domains etc. with OSINT☆101Apr 4, 2024Updated 2 years ago
- JSpider is a smart crawler for hidden endpoints. It crawls and extracts hidden API endpoints and URLs from JavaScript files and HTML sour…☆18Oct 23, 2026Updated 2 weeks ago
- A collection of CQL hunting leads for CrowdStrike Falcon and LogScale, mapped to the MITRE ATT&CK framework.☆35Sep 8, 2026Updated last month
- Live ETW-TI event viewer for Windows kernel threat-intelligence telemetry. Research tool for exploring the same signals commercial EDRs r…☆171Apr 15, 2026Updated 6 months ago
- KQLIntel is a browser-based tool that uses LLMs to convert threat intelligence reports into actionable Kusto Query Language (KQL) queries…☆31Aug 4, 2025Updated last year
- A simple Python tracker that collects today’s hacking / security news.☆11Sep 24, 2025Updated last year
- ☆62Jun 18, 2025Updated last year
- These playbooks serve as drafts and starting points for initial triage. They are not intended to be final, out-of-the-box solutions but s…☆14Dec 26, 2024Updated last year
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- My notes for the CEH v12 practical exam☆48Dec 30, 2023Updated 2 years ago
- It was developed to speed up the processes of SOC Analysts during analysis☆48Mar 31, 2026Updated 7 months ago
- ☆20Mar 21, 2024Updated 2 years ago
- MISP to Microsoft Defender integration☆19Jul 9, 2026Updated 3 months ago
- XORCISM is a cybersecurity project for an open unified platform for cyber exposure management, and tools☆87Aug 29, 2026Updated 2 months ago
- This repository contains scripts designed to streamline and simplify workflows for purple/blue/red teamers, making day-to-day operations …☆13Jul 18, 2026Updated 3 months ago
- ☆34Jan 15, 2025Updated last year
- A web application for generating, parsing and validating, manipulating, visualizing and executing CACAO v2.0 playbooks.☆43Jun 6, 2026Updated 5 months ago
- A collection of PowerShell scripts designed to transform raw forensic data into formats suitable for analysis☆12Jan 18, 2026Updated 9 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆11Jun 16, 2025Updated last year
- yara detection rules for hunting with the threathunting-keywords project☆171May 11, 2025Updated last year
- Misc notes from Google's Cybersecurity Professional Certificate☆96Aug 6, 2024Updated 2 years ago
- Kaburra is a project that supports demo attack phase in Social Engineering Awareness training.☆15Oct 5, 2024Updated 2 years ago
- Open Source Security Operations Center Documentation☆229Jun 30, 2025Updated last year
- ☆18Sep 22, 2025Updated last year
- OCSF-Tool: A command-line utility for managing Open Cybersecurity Schema Framework (OCSF) schemas, Supporting Proto file generation for O…☆12Mar 17, 2025Updated last year