Canary Token System for SOC - Deception Technology - sowmya-146/canary-token-system

SOC C2 Beaconing Detection Platform. Contribute to Dhare2006/BeaconHunter development by creating an account on GitHub.

Living Off the Orchard: macOS Binaries (LOOBins) is designed to provide detailed information on various built-in "living off the land" macOS binaries and how they can be used by t...

Contribute to Miguel-R13/BlueTeam-Lab-Analisis-de-Malware-Spear-Phishing-VBA-Downloader development by creating an account on GitHub.

Melissae is a modular, containerized honeypot framework that simulates real-world services or CVEs to detect and analyze malicious activity. Logs are centralized and enriched, with a built-in dashb...

In this repo, we’ll walk through building a home SOC lab where you can see how common attack techniques generate logs, and how defenders can detect and investigate them using Splunk. - GL1T0H/End-T...

Contribute to zy538324/BlueTeam development by creating an account on GitHub.

🛡️ VirusTotal for the terminal. Contribute to ibnaleem/vtscan development by creating an account on GitHub.

A Poc attempt at hunting suspicious thread creation events using ETW only. - 0xjbb/SuspiciousThreads

PowerShell-based Blue Team monitoring project for Windows event analysis, suspicious activity detection, automated alerts, logging, and security report generation. - Tenorio04/BlueTeam-Monitor

SSH honeypot that fingerprints attacker playbooks, enriches with VirusTotal/AbuseIPDB/GreyNoise, and exports STIX 2.1 indicators. - hett-patell/ShardLure

Practical DFIR and incident response playbooks covering phishing, malware, ransomware, insider threats, and cloud security incidents for SOC and IR teams. - regantemudo/dfir-playbooks