Built a Docker-based Wazuh SIEM environment with Wazuh Manager and Agent to detect SSH brute-force attacks, developed a custom detection rule and automated mitigation using Fail2Ban. - nishkab36/wa...

Open source HIDS tailored for Microsoft Windows and Active Directory - Saeros-Security/Saeros

Collecting IOCs posted on Twitter. Contribute to jaguarmayan8/TwitterIoCsfeed development by creating an account on GitHub.

Home lab for SOC Analyst training. Includes detection rules, playbooks and alert analysis. - Davidking100/SOC-BlueTeam-Lab

Automated Wazuh Threat Intelligence Playbook using n8n, VirusTotal, AbuseIPDB, GeoIP, and Telegram for SOC automation. - ashwanth-saran/wazuh-network-threat-intelligence-playbook

SOC investigation of a suspected lateral movement attack using Sysmon, Windows Event Logs, Elastic SIEM, and MITRE ATT&CK to analyze Living-off-the-Land (LotL) activity and reconstruct the ...

Scan RMM-managed software endpoints for vulnerabilities using NIST NVD, CISA KEV, and EPSS data with this agentless PowerShell script. - Staffardprobable495/fleet-cve-scanner

Linux & security fundamentals demonstrated through the OverTheWire Bandit wargame skills-mapped, spoiler-free. - WiLL75G/overthewire-bandit-skills

Detection Rule / Sigma Rule Writing. Contribute to huzaifa847/BlueTeam-Week2 development by creating an account on GitHub.

Self-hosted threat-intelligence desk for cyber defense teams. - ryanshrier/blueteam

Open-source enterprise SOC platform — SIEM · SOAR · EDR · DPI · MDM · NGFW in one stack. Self-host in minutes. - The-Abhishek1/XCLOAK-SECURITY-SUITE

Rapidly Search and Hunt through Windows Forensic Artefacts - WithSecureLabs/chainsaw

Cyber Security ALL-IN-ONE Platform - English UI fork of yaklang/yakit - ChathurangaBW/yakit-en

Contribute to hackerdrop25-collab/Unified-BlueTeam-Threat-Detection-and-Alert-System development by creating an account on GitHub.

blueteam. Contribute to chris-cmt/blueteam development by creating an account on GitHub.

My 30-day journey from attacker view to defender view. Documenting Nmap, vuln analysis, detection, and defense hardening. - Simonadeka/blueteam-labs

Documentation of my 3-month Cyberster Blue Team internship — covering SOC operations, SIEM lab setup (VirtualBox, Wazuh), network traffic analysis, detection rules, and incident response, building ...

Hands-on Red Team vs Blue Team simulation across three rounds — Nmap/Hydra attacks on an isolated VM, systematic hardening with Ansible, and real-time detection with Wazuh. Empirical before/after s...

KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rul...

Identifies real file types via binary signatures (Magic Numbers) to uncover hidden extensions, detect masqueraded malware, and mitigate phishing vectors. - SyedShaheerHussain/File-Type-Identifier_...