🔵

Threat Hunting

[Work in progress]
Tools
Sysmon Simulator: https://github.com/ScarredMonk/SysmonSimulator​
Phishing Catcher: https://github.com/x0rz/phishing_catcher​
Atomic Red Team: https://atomicredteam.io/​
Infection Monkey: https://www.guardicore.com/infectionmonkey/​
Metta: https://github.com/uber-common/metta​
Caldera: https://github.com/mitre/caldera​
SIEM Platforms
Hunting ELK: https://github.com/Cyb3rWard0g/HELK​
Graylog: https://www.graylog.org/​
Splunk: https://www.splunk.com/​
Azure Sentinel: https://azure.microsoft.com/es-es/services/microsoft-sentinel/​
Datadog: https://www.datadoghq.com/dg/security/siem-solution/​
Elastic (ELK) Stack: https://www.elastic.co/es/what-is/elk-stack + elastalert​
Security Onion: https://securityonionsolutions.com/​
OSSEC: https://www.ossec.net/​
IBM QRadar: https://www.ibm.com/es-es/qradar/security-qradar-siem​
Wazuh: https://wazuh.com/​

RESOURCES (in progress) - Previous

Others

Next - RESOURCES (in progress)

Threat Intelligence

Last modified 9mo ago