This will be the repo for the BTHb.
☆42Jul 27, 2026Updated 3 months ago
Alternatives and similar repositories for BlueTeam-Handbook
Users that are interested in BlueTeam-Handbook are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Web access logs analyzer - provides an insight on how remote hosts behave☆15Sep 13, 2021Updated 5 years ago
- CLI generator for Velociraptor offline collector☆17Sep 15, 2026Updated last month
- IRIS Module to Run Any Velociraptor Artifact☆16Mar 31, 2023Updated 3 years ago
- Adversarial Detection Engineering knowledge base — ADE taxonomy, worked technique files, platform bug patterns, mitigations, and purple-t…☆87Sep 30, 2026Updated last month
- End-to-end Azure edge security lab: Front Door Premium with WAF, dual-region Container Apps failover, Microsoft Sentinel, SOC automation,…☆23Sep 18, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A collection of practical SOC investigation playbooks for common security alerts including brute-force attacks, phishing incidents, suspi…☆20Mar 15, 2026Updated 7 months ago
- ☆14Jul 12, 2026Updated 3 months ago
- A suite of Volatility 3 plugins for memory forensics of Docker containers☆19Jan 10, 2024Updated 2 years ago
- ☆91Aug 3, 2026Updated 2 months ago
- Resources, research, and tools for securing AI systems☆31Aug 11, 2025Updated last year
- ThreatCheck - Select any indicator of compromise on any web page - or highlight an entire paragraph from a threat report - and instantly …☆35May 6, 2026Updated 5 months ago
- A small guide on Unknown/Orphaned SIDs and some PowerShell tools to help you get rid of them.☆21Apr 16, 2026Updated 6 months ago
- Cloudflare Workers + KV + Graphql☆13Nov 22, 2018Updated 7 years ago
- OWASP Python framework for automated STRIDE threat modeling as code — MITRE ATT&CK mapping, D3FEND mitigations, Attack Flow, CAPEC, sever…☆16Oct 3, 2026Updated 3 weeks ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Miscellaneous stuff I create☆76Oct 21, 2026Updated last week
- Import and export custom Sysmon configurations using an interactive GUI that lets you build event rules, manage filters, and generate cle…☆31Mar 10, 2026Updated 7 months ago
- Assess, convert and deploy Microsoft Sentinel analytics rules as Defender XDR custom detections☆15Sep 29, 2026Updated last month
- DFIR forensics companion server + capture extension☆35Updated this week
- 🔥 Everything about web-application firewalls (WAF).☆26Mar 12, 2022Updated 4 years ago
- Standalone zero-driver Windows system and API monitor in Rust☆23Oct 19, 2026Updated last week
- Defensive PoC decoy for CVE-2025-59287 (WSUS) - emulates WSUS endpoints, captures request bodies and metadata, saves evidence for forensi…☆26Oct 27, 2025Updated last year
- A curated list of resources for DFIR through Microsoft Defender for Endpoint leveraging kusto queries, powershell scripts, tools such as …☆475Feb 18, 2026Updated 8 months ago
- A Purple Team lab simulating Active Directory attacks (Kerberoasting, BloodHound, lateral movement) and implementing defensive hardening …☆39Oct 7, 2026Updated 3 weeks ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Online Reverse Enginerring viewer☆15Jul 31, 2026Updated 2 months ago
- A agentic Intel to hunt pipeline. Get hunting faster☆15Oct 19, 2026Updated last week
- Pivpn.io website content and configuration files☆11May 27, 2024Updated 2 years ago
- A production-ready, enterprise-grade MDR framework that transforms chaotic security alerts into structured, actionable intelligence.☆28Feb 14, 2026Updated 8 months ago
- ☆33Aug 19, 2026Updated 2 months ago
- The article provides a push-button solution to protect your infrastructure against incoming traffic from embargoed countries as defined b…☆16Jun 1, 2019Updated 7 years ago
- Douglas Mun's Technical Guidebooks☆30Sep 12, 2026Updated last month
- Get-NetScalerTimeline - Automated File System Timeline Creation for NetScaler ADC/Gateway (DFIR)☆15Oct 4, 2026Updated 3 weeks ago
- Public talks, workshops and research presentations from BlackArrow☆28Jul 30, 2026Updated 3 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Send CloudWatch Logs Securely to Syslog via a Lambda function☆22Nov 3, 2017Updated 8 years ago
- ☆92Sep 19, 2026Updated last month
- A zero-symbol static analysis engine that extracts and mathematically ranks the Windows RPC attack surface using an AHP-based risk model.☆15Aug 26, 2026Updated 2 months ago
- Protect sensitive prompt spans with trusted LLM detection and local authenticated encryption before using Claude Code.☆14Sep 18, 2026Updated last month
- Parse objdump files using tree-sitter☆14Nov 22, 2023Updated 2 years ago
- ☆13Jul 11, 2024Updated 2 years ago
- A Programmer☆17Jun 25, 2026Updated 4 months ago