This project automates SOC workflows using Wazuh, Shuffle, and TheHive. It involves setting up a Windows 10 client with Sysmon and Ubuntu 22.04 for Wazuh and TheHive, deployed on cloud or VMs. Goals: automate event collection, alerting, and incident response to enhance SOC efficiency.
☆44Jun 7, 2024Updated 2 years ago
Alternatives and similar repositories for SOC-Automation-Lab
Users that are interested in SOC-Automation-Lab are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆25Jul 27, 2023Updated 3 years ago
- This repository stores my learning journey and write-ups throughout the security blue team's Blue Team Junior Analyst Certification☆21May 12, 2024Updated 2 years ago
- ☆14Feb 12, 2026Updated 5 months ago
- ☆30Dec 27, 2023Updated 2 years ago
- ☆26Jul 22, 2026Updated 2 weeks ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- The application consists of several vulnerable web applications that are integrated with Wazuh.☆22May 1, 2023Updated 3 years ago
- Wazuh decoder for mikrotik logs and monitoring login/logout wireguard peers☆38Jun 19, 2024Updated 2 years ago
- ☆12Oct 15, 2024Updated last year
- ☆17Jul 8, 2024Updated 2 years ago
- SOAR Automation with Shuffle, Wazuh & TheHive | This project integrates Shuffle SOAR, Wazuh SIEM, and TheHive to automate security incide…☆136Feb 21, 2025Updated last year
- Querying And Deleting Shadow Copies Using The IOCTL_VOLSNAP_QUERY_NAMES_OF_SNAPSHOTS & IOCTL_VOLSNAP_DELETE_SNAPSHOT IOCTLs☆22Aug 7, 2025Updated last year
- ☆23Feb 3, 2026Updated 6 months ago
- Open-source collaborative note-taking platform for cybersecurity and CTI teams. IOC auto-extraction, STIX 2.1 export, real-time ed…☆23Apr 6, 2026Updated 4 months ago
- A GLPI plugin that allows customization of logos, background and custom CSSs☆25Updated this week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Vulnerable Windows Server 2012 VM made for practicing certain Active Directory attacks.☆24Jun 13, 2023Updated 3 years ago
- ☆16Oct 28, 2021Updated 4 years ago
- Beginner-friendly web penetration testing projects for hands-on learning.☆45May 23, 2024Updated 2 years ago
- This project uses deep learning algorithms and the Keras library to determine if a person has certain diseases or not from their chest x-…☆10Nov 18, 2025Updated 8 months ago
- T-Guard Repository☆18May 2, 2024Updated 2 years ago
- Alpine Linux based FreeRadius Docker container☆12Updated this week
- UNI-2021-2025☆11Aug 7, 2024Updated 2 years ago
- Certified SOC Analyst (CSA) Program - A comprehensive 6-month, hands-on Security Operations Center training curriculum. Developed by Amin…☆31Dec 24, 2025Updated 7 months ago
- Use this tools properly Only for education purpose☆12Jul 27, 2023Updated 3 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Super light, super fast, unlimited search idea☆27Aug 3, 2025Updated last year
- Things we learned from Capture The Flag hacking competitions we participated in☆22Mar 15, 2021Updated 5 years ago
- Repository for SOC analysts, queries to investigate, advanced hunting, sites for analysis, malware samples, courses to improve skills, IO…☆140Apr 13, 2026Updated 3 months ago
- You’ll find organized DevOps and Cloud Computing notes, code samples, and projects to quickly learn AWS, Docker, Terraform, Kubernetes, a…☆20Jul 20, 2026Updated 3 weeks ago
- a tiny program to consume from ETW providers for research☆55Jan 4, 2025Updated last year
- A curated knowledge base to build, run and mature a SOC (including CSIRT).☆1,794Updated this week
- A collection of Ansible automation roles for my homelab.☆13Jan 17, 2025Updated last year
- Content and collateral for the Microsoft Sentinel SOC 101 series☆218Feb 12, 2024Updated 2 years ago
- Very Vulnerable Management API (VVMA) is a deliberately insecure RESTful API built with Node.js for educational and testing purposes. It …☆71Jun 5, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆70May 3, 2021Updated 5 years ago
- this repo contains all the essential tolls required to be an devops engineer☆20Mar 10, 2026Updated 5 months ago
- This repository contains steps on how i set up a basic home lab running Active Directory.☆40Apr 2, 2023Updated 3 years ago
- ☆13Aug 1, 2023Updated 3 years ago
- This is a gui interface for airmon-ng☆14Mar 23, 2023Updated 3 years ago
- Vulnerability Assessment and Penetration Testing - Projects☆18Mar 7, 2025Updated last year
- On-Premises Open Cyber Threat Intelligence Platform☆11Oct 29, 2024Updated last year