PaloAltoNetworks / Unit42-Wireshark-tutorials
Unit 42 repository hosting packet captures (pcaps) for our series of Wireshark tutorials
☆39Updated last year
Alternatives and similar repositories for Unit42-Wireshark-tutorials:
Users that are interested in Unit42-Wireshark-tutorials are comparing it to the libraries listed below
- pcaps of traffic for traffic analysis workshop☆84Updated 3 years ago
- Packet captures of malicious traffic for analysis using Wireshark☆58Updated last year
- ☆41Updated 2 years ago
- This is the One Stop place where you can several Detection Rules which can help you to kick start your journey on SIEM, SOC work.☆38Updated 3 years ago
- Creation of a laboratory for malware analysis in AWS☆96Updated 2 years ago
- Endpoint detection for remote hosts for consumption by RITA and Elasticsearch☆70Updated last year
- ☆57Updated 3 years ago
- Open Threat Hunting Framework☆112Updated last year
- Tools for simulating threats☆183Updated last year
- ☆43Updated last year
- Blue Team detection lab created with Terraform and Ansible in Azure.☆151Updated 4 months ago
- A really good DFIR automation for collecting and analyzing evidence designed for cybersecurity professionals.☆153Updated 10 months ago
- ☆65Updated 2 years ago
- Jupyter Notebooks for the Blue Team☆33Updated 2 months ago
- Learning by Practising - Hack & Detect - A Practical Guide to Hacking and its Detection via network forensics☆78Updated last year
- Suricata rules that can detect a wide range of threats, including malware, exploits, and other malicious activity especially web applicat…☆43Updated 11 months ago
- Extracts fields from zeek logs, compatible with zeek-cut☆21Updated 8 months ago
- A Zeek Network Security Monitor tutorial that will cover the basics of creating a Zeek instance on your network in addition to all of the…☆61Updated 2 years ago
- MAD ATT&CK Defender: ATT&CK Adversary Emulation Repository☆112Updated last year
- ☆53Updated this week
- Hands-On Network Forensics by Nipun Jaswal☆46Updated last year
- Consolidation of various resources related to Microsoft Sysmon & sample data/log☆109Updated 3 years ago
- SIEM Cheat Sheet☆73Updated last year
- ☆67Updated 3 months ago
- Chocolatey packages supporting the analysis environment projects FLARE-VM & Commando VM.☆171Updated this week
- How to setup a honeypot with an IDS, ELK and TLS traffic inspection☆157Updated 2 years ago
- Some important DFIR Resources☆83Updated 2 years ago
- Lupo - Malware IOC Extractor. Debugging module for Malware Analysis Automation☆106Updated 2 years ago
- ☆68Updated 7 months ago
- This repository contains Splunk queries to hunt some anomalies☆40Updated 2 years ago