Visualize your AWS resources with a local, read-only desktop dashboard. Connects using existing credentials to monitor multi-region services without agents. - Roentgenographic-skyline37/cloudgaze

This will be the repo for the BTHb. Contribute to DonMVB/BlueTeam-Handbook development by creating an account on GitHub.

Self-managed SOC Tier 1 lab using Elastic Stack, Fleet Server, Windows/Sysmon, Linux SSH logs, Apache/WAF logs, detection rules, alerts, and dashboards. - Kuyenda18/SOC-Tier1-ELK-Fleet-Lab

Find old IAM policy versions hiding extra permissions. - wakeful/d2O

Canary Token System for SOC - Deception Technology - sowmya-146/canary-token-system

SOC C2 Beaconing Detection Platform. Contribute to Dhare2006/BeaconHunter development by creating an account on GitHub.

Cybersecurity portfolio focused on security audits and digital forensics (DFIR). Includes Windows log analysis, incident response, root cause analysis and real-world investigations. - rofesroger/au...

Living Off the Orchard: macOS Binaries (LOOBins) is designed to provide detailed information on various built-in "living off the land" macOS binaries and how they can be used by t...

Contribute to Miguel-R13/BlueTeam-Lab-Analisis-de-Malware-Spear-Phishing-VBA-Downloader development by creating an account on GitHub.

Melissae is a modular, containerized honeypot framework that simulates real-world services or CVEs to detect and analyze malicious activity. Logs are centralized and enriched, with a built-in dashb...

The Ultimate Native macOS Command Center for Windows Management (remote administration tool) - TargetBack/TargetBack-Rat

Blue Team writeups de mes challenges CyberDefenders, BTLO ou HackTheBox Sherlocks. - heraclescap/blueteam-writeups

In this repo, we’ll walk through building a home SOC lab where you can see how common attack techniques generate logs, and how defenders can detect and investigate them using Splunk. - GL1T0H/End-T...

Contribute to zy538324/BlueTeam development by creating an account on GitHub.

🛡️ VirusTotal for the terminal. Contribute to ibnaleem/vtscan development by creating an account on GitHub.

Practical Incident Response, Threat Intelligence, and Security Operations labs from Blue Team Labs Online - Ashim-sudo/BlueTeam-Labs

A Poc attempt at hunting suspicious thread creation events using ETW only. - 0xjbb/SuspiciousThreads

PowerShell-based Blue Team monitoring project for Windows event analysis, suspicious activity detection, automated alerts, logging, and security report generation. - Tenorio04/BlueTeam-Monitor

TraceGuard uses the eBPF subsystem of the linux kernel to get valuable insights to what your system is doing - L1ghtn1ng/traceguard