mttaggart / blue-jupyter
Jupyter Notebooks for the Blue Team
☆141Updated last year
Related projects ⓘ
Alternatives and complementary repositories for blue-jupyter
- An easy to use PowerShell script to collect memory and disk forensics for DFIR investigations.☆270Updated 2 months ago
- An analytical challenge created to test junior analysts looking to try performing proactive and reactive cyber threat intelligence.☆186Updated 4 months ago
- Repository resource for threat hunter☆158Updated 6 years ago
- Windows Malware Investigation Scripts & Docs☆75Updated last week
- A python script developed to process Windows memory images based on triage type.☆258Updated 11 months ago
- The Threat Actor Profile Guide for CTI Analysts☆97Updated last year
- A community-driven repository for threat hunting ideas, methodologies, and research that serves as a central gathering place for hunters …☆139Updated this week
- Some Threat Hunting queries useful for blue teamers☆123Updated 2 years ago
- Some important DFIR Resources☆82Updated last year
- MISP Playbooks☆174Updated last month
- This repo is where I store my Threat Hunting ideas/content☆85Updated last year
- Tools for simulating threats☆177Updated last year
- Completely Risky Active-Directory Simulation Hub☆99Updated last year
- Rules generated from our investigations.☆189Updated 3 weeks ago
- ☆114Updated 7 months ago
- Blue Team detection lab created with Terraform and Ansible in Azure.☆143Updated last year
- Resources To Learn And Understand SIGMA Rules☆168Updated last year
- A really good DFIR automation for collecting and analyzing evidence designed for cybersecurity professionals.☆148Updated 6 months ago
- Repository of attack and defensive information for Business Email Compromise investigations☆230Updated 2 months ago
- Automated security lab provisioning☆69Updated 4 months ago
- A Jupyter notebook to assist with the analysis of the output generated from Volatility memory extraction framework.☆94Updated last year
- Creation of a laboratory for malware analysis in AWS☆85Updated last year
- A repository of my own Sigma detection rules.☆156Updated 2 months ago
- Purpleteam scripts simulation & Detection - trigger events for SOC detections☆158Updated last week
- Sigma rules to share with the community☆115Updated 2 months ago
- The LOLBins CTI-Driven (Living-Off-the-Land Binaries Cyber Threat Intelligence Driven) is a project that aims to help cyber defenders und…☆110Updated 7 months ago
- Repository for different Windows DFIR related CMDs, PowerShell CMDlets, etc, plus workshops that I did for different conferences or event…☆75Updated 3 years ago
- A repository to share publicly available Velociraptor detection content☆119Updated this week
- Pointing cybersecurity teams to thousands of detection rules and offensive security tests aligned with common attacker techniques☆123Updated 8 months ago
- A repo hosting the Markua content for the EZ Tools manuals hosted on Leanpub☆63Updated last year