CVE-2021-44228 Research, Attack Simulation and Blue Team Detection Lab - DatLang777/Log4Shell-BlueTeam-Detection-Lab

Complete collection of security commands for CTF competitions and hands-on penetration testing. - SiteQ8/ctf-notes

Signal Console, Community Edition: the web console for Signal, the read-only Windows DFIR survey by Intrusion Academy. Import every host's Signal run and see where to look first and what ea...

PurpleHawkS helps Elevating Defense through Sharp-Eyed Attack Intelligence - chandraktrivedi/PurpleHawkS

Detecção e Resposta a Ataques de Força Bruta | Perspectiva Blue Team / SOC - wav-cyber/brute-force-detection-blueteam

Python script that summarizes Wazuh SSH brute-force alerts by attacker IP, with first and last seen times. - Kamal0022/wazuh-alert-summarizer

Deploy custom SOC Agents to Gemini Enterprise Agent Platform - dandye/agentic_soc_gemini_enterprise

Packet-level investigation of the Natureforce malware traffic exercise. Finds the infected host, extracts and verifies the executable, measures the follow-on session, and ends with draft Suricata a...

Splunk SIEM lab that detects brute force and password spraying attacks on a Flask login app. - camilamorei/personal-siem-lab

Agentic AI-driven EDR framework for Windows & Linux: hybrid rule + UEBA detection, attack-chain correlation, and human-approved adaptive rules. - coldman07/SentinelForge

A Linux Blue Team triage and security auditing tool for collecting system, network, authentication, process and security configuration information. - 0x1nnx/linux-blueteam-triage-tool

CVE-2026-111497 – Node.js Brotli Decoder OOB Write (CVSS 9.2) | Red/Blue Team suite for unpatched Node.js 22.x, 24.x, 26.x. 2 tools: Full Exploit (patch detection, remote DoS, Brotli bomb, lab RCE)...

Blue Team lab: 3 honeypots em Python (SSH/HTTP/FTP) → Wazuh com 11 regras custom de correlação → alerta no Telegram. Laboratório reproduzível com Docker Compose - não é configuração de produção. - ...

A comprehensive repository for CyberOps documentation, Blue Team playbooks, and open-source forensic tools like Cerberus and Chimera. - andranglin/RootGuard

eBPF CO-RE rootkit detector for Linux—finds hidden syscalls, modules, processes, and files. - waldh4ri/zygarde

Contribute to dandye/adk_runbooks development by creating an account on GitHub.

RouterOS Security Assessment Toolkit. Contribute to ifritnoises/sara development by creating an account on GitHub.

SOC Analyst Level 1 Portfolio | Python for Blue Team | Log Analysis, Brute Force Detection | Learning in Public - Day 16 to Day 30 - aishasadiqa620-eng/BlueTeam-Portfolio

Millisec--->>BlueTeam. Contribute to blue-team021/SOC-Detection-Rules development by creating an account on GitHub.

Detection rules for Splunk and QRadar. Contribute to Kenshi09127/BlueTeam-SIEM-Rules development by creating an account on GitHub.