sbousseaden / Slides

#ThreatHunting #DFIR #Malware #Detection Mind Maps

Extract and aggregate threat intelligence.

DetectionLabELK is a fork from DetectionLab with ELK stack instead of Splunk.

Your Everyday Threat Intelligence

Recon Hunt Queries

Documentation and Sharing Repository for ThreatPinch Lookup Chrome & Firefox Extension

Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.

Deploy and maintain Symon through the Splunk Deployment Sever

A repository of sysmon configuration modules

Windows Events Attack Samples

ThreatHunt is a PowerShell repository that allows you to train your threat hunting skills.

Incident Response - Fast suspicious file finder

incident response scripts

A datasource assessment on an event level to show potential coverage or the MITRE ATT&CK framework

Oriana is a threat hunting tool that leverages a subset of Windows events to build relationships, calculate totals and run analytics. The results are presented in a Web layer to help defenders identify outliers and suspicious behavior on corporate environments.

A Splunk app mapped to MITRE ATT&CK to guide your threat hunts

A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns.

Signature base for my scanner tools

All-in-one bundle of MISP, TheHive and Cortex

Open Source EDR for Windows