CVE-2021-44228 Research, Attack Simulation and Blue Team Detection Lab - DatLang777/Log4Shell-BlueTeam-Detection-Lab

Complete collection of security commands for CTF competitions and hands-on penetration testing. - SiteQ8/ctf-notes

Signal Console, Community Edition: the web console for Signal, the read-only Windows DFIR survey by Intrusion Academy. Import every host's Signal run and see where to look first and what ea...

PurpleHawkS helps Elevating Defense through Sharp-Eyed Attack Intelligence - chandraktrivedi/PurpleHawkS

Local SIEM lab with real-time event correlation, attack simulation, and incident-response evidence. - Infinite-Leo/sentinelx-SIEM

Detecção e Resposta a Ataques de Força Bruta | Perspectiva Blue Team / SOC - wav-cyber/brute-force-detection-blueteam

Python script that summarizes Wazuh SSH brute-force alerts by attacker IP, with first and last seen times. - Kamal0022/wazuh-alert-summarizer

Automate Windows forensic examinations: parse disk images, surface artifacts for DLP, USB, malware, phishing, ransomware, and generate court-ready reports. - NguyenmToi/windows-forensic-automation

Deploy custom SOC Agents to Gemini Enterprise Agent Platform - dandye/agentic_soc_gemini_enterprise

Packet-level investigation of the Natureforce malware traffic exercise. Finds the infected host, extracts and verifies the executable, measures the follow-on session, and ends with draft Suricata a...

Contribute to ItsDannz/BlueTeam-SOC-WriteUp development by creating an account on GitHub.

Splunk SIEM lab that detects brute force and password spraying attacks on a Flask login app. - camilamorei/personal-siem-lab

Point-and-shoot live application forensics for Windows (DFIR): click any window and get a sealed forensic report about the process behind it. - horizonbymuneeb/liveappinspector

Agentic AI-driven EDR framework for Windows & Linux: hybrid rule + UEBA detection, attack-chain correlation, and human-approved adaptive rules. - coldman07/SentinelForge

A Linux Blue Team triage and security auditing tool for collecting system, network, authentication, process and security configuration information. - 0x1nnx/linux-blueteam-triage-tool

Network and Android forensics for cybercrime labs: PCAP analysis with a measured false-alarm rate on every finding, static APK examination that never runs the sample, hash-chained custody, BSA s.63...

Local security log analyzer for Windows. Detects brute force, password spraying and break-ins, with a private dashboard. - Shayan-Chakra/logsentinel

Composable, vendor-neutral defensive security control plane: Go orchestrator with embedded dashboard, ML/IDS, SIEM correlation, SOAR playbooks, threat intel and passive OT/ICS visibility. - elmouta...

First-line SOC triage on a Windows domain: ManageEngine SIEM and LimaCharlie EDR, false positives dismissed, incidents escalated, broken alert rules found and fixed - IshSoundankar/soc-siem-edr-lab

Скрипты автоматизации рутинных задач ИБ: анализ журналов, аудит настроек Windows, извлечение индикаторов компрометации - Ravikjan/security-scripts