Kumar6564

TheHive

TheHive: a Scalable, Open Source and Free Security Incident Response Platform

ThreatHunter-Playbook

A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.

SIEM-Cheat-Sheet

SIEM Cheat Sheet

Misc-Research

A collection of tools, scripts and personal research

kalisoc

Cloudformation Template to Launch the SOC from Kali Purple

Kali-Purple

https://gitlab.com/kalilinux/documentation/kali-purple

Demystifying-KQL

Content Repo for Demystifying KQL Tutorial Series

awesome-devsecops

An authoritative list of awesome devsecops tools with the help from community experiments and contributions.

dfiq

DFIQ is a collection of investigative questions and the approaches for answering them

PcapXray

:snowflake: PcapXray - A Network Forensics Tool - To visualize a Packet Capture offline as a Network Diagram including device identification, highlight important communication and file extraction

aa-tools

Artifact analysis tools by JPCERT/CC Analysis Center

ToolAnalysisResultSheet

Tool Analysis Result Sheet

ytdlnis

Android Video/Audio Downloader app using yt-dlp

BlueTeam-Tools

Tools and Techniques for Blue Team / Incident Response

container-security-checklist

Checklist for container security - devsecops practices

resilient-scripts

Example scripts and rules for use in Resilient playbooks.

resilient-python-api

Python Library for the IBM SOAR REST API, a Python SDK for developing Apps for IBM SOAR and more...

resilient-community-apps

Source code for IBM SOAR Apps that are available on our App Exchange

shareable-soar-workflows

This is a repository of vendor-agnostic workflows provided for those interested in deploying Security Orchestration, Automation, and Response capabilities within their organizations.

decider

A web application that assists network defenders, analysts, and researchers in the process of mapping adversary behaviors to the MITRE ATT&CK® framework.

cti

Cyber Threat Intelligence Repository expressed in STIX 2.0

IRM-deprecated

Incident Response Methodologies

SIEGMA

SIEGMA - Transform Sigma rules into SIEM consumables

imran-parray.github.io

Mind-Maps1

Credit goes to Imran-Parray

awesome-cybersecurity-blueteam

:computer:🛡️ A curated collection of awesome resources, tools, and other shiny things for cybersecurity blue teams.

aes-finder

Utility to find AES keys in running processes

ThreatPursuit-VM

Threat Pursuit Virtual Machine (VM): A fully customizable, open-sourced Windows-based distribution focused on threat intelligence analysis and hunting designed for intel and malware analysts as well as threat hunters to get up and running quickly.

malware-ioc

Indicators of Compromises (IOC) of our various investigations

xManager

Ad-Free, New Features & Freedom