soc-faker

soc-faker soc-faker is used to generate fake data for use by Security Operation Centers, Information security professionals, product teams, and many more. Getting Started soc-faker works with Python 3.6 or greater. You can install soc-faker using pip as well as cloning this repository directly. A...

baochip-1x

Baochip 1x This repo contains the open source elements of the Baochip 1x. This repo focuses on the hardware elements of the Baochip 1x. Developers are referred to the official Rust SDK, located in the Xous repo. There is a vscode extension named baochip which can automate build & flash for...

awesome-soc-analyst

awesome-soc-analyst We just collected useful resources for SOC analysts and SOC analyst candidates. This repository is maintained by LetsDefend. Feel free to add new resources here. Table of Contents Books Malware Analysis Practice Labs Phishing Analysis Tools for Investigation Network Log Source...

soc-home-lab

soc-home-lab 👉 New here? ReadSTARTHERE.md first. It explains what this repo is, gives you a path to follow new to SOC / practicing detection / prepping for interviews, and has one table of every case with its CVE/KEV status, skills, contents, and the command to verify its detection. Hands-on...

awesome-lists

Security lists for SOC/DFIR detections 🐾 Threat Hunting: ThreatHunting keywords Site ThreatHunting keywords Lists ThreatHunting Yara rules ThreatHunting searches Windows Services Searches User-Agents Searches DNS Over HTTPS Searches Suspicious TLDs Searches HijackLibs Searches Phishing & DNSTWIST...

awesome-soc

Awesome SOC An operational handbook and knowledge base to build, run and mature a SOC including CSIRT. Covering: SOC basics detection engineering threat intelligence SOC metrics/KPI SOC automation AI use cases and best practices SOP SOC playbooks Those are my view, based on my own experience as...

Bestechic BES2300 Bluetooth Audio SoC Buffer Overflow DoS

The vulnerability of the btmaclhandle function in Bestechnic BES2300 Bluetooth Audio SoC microprogramming software is related to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to cause a service failure by sending a specially crafted L2CAP packet...

Bestechic BES2300 Bluetooth Audio SoC Buffer Overflow DoS

The vulnerability of the SBCDecodeFrames function in Bestechnic BES2300 Bluetooth Audio SoC microprogramming software is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service failure...

Bestechic BES2300 Bluetooth Audio SoC Heap Buffer Overflow DoS

The vulnerability of the avrcpindicateprocessdataind function in the microprogramming-based audio chipset of Bestechnic BES2300 Bluetooth Audio SoC is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to cause a service failure by sending a specially crafte...

AiSOC

AiSOC An open-source, self-hostable AI Security Operations Center. It ingests your security telemetry, detects and correlates threats, investigates them with AI agents whose reasoning is fully auditable, and proposes responses a human approves. Technical Guide PDF · Docs · Architecture · What...

FreeLabFriday_Labs

Welcome to the Free Lab Friday Lab Platform! Need 1 lab?? Maybe 2???? Well we've got 200+ so go crazy! This repository contains all lab instructions for the following content: Information Security Core Skills SOC Core Skills Active Defense & Cyber Deception SOC Analyst Labs Backdoors & Breaches...

Sooty

Overview Sooty is a tool developed with the task of aiding SOC analysts with automating part of their workflow. One of the goals of Sooty is to perform as many of the routine checks as possible, allowing the analyst more time to spend on deeper analysis within the same time-frame. Details for man...

WAMpage

WAMpage WAMpage - A WebOS root LPE exploit chain CVE-2022-23731 This exploit is mainly of interest to other researchers - if you just want to root your TV, you probably want RootMyTV, which offers a reliable 1-click persistent root. Currently only supports WebOS 4.x on 32-bit SoCs. This software ...

Bryobio

Bryobio🕷️ NETWORK Pcap File Analysis It was developed to speed up the processes of SOC Analysts during analysis🕷️ This tool is valuable for cybersecurity professionals, particularly in analyzing and understanding network traffic and potential security threats. The provided illustration reflects the...

IntelligentProcessLifecycle

IntelligentProcessLifecycle The Intelligent Process Lifecycle of Active Cyber Defenders Description This github hosts the poster related files of false positive and error categories in security operation services. The goal is to define an open source reporting standard for Security Operation Cent...

openqore

openqore an open-source toolkit to patch, modify, and enhance the firmware of headphones based on the BES chipsets originally started from the soundcore Q35, with future support for other models planned. note: this project is my personal journey into the world of hardware reverse-engineering and...

Quantum-Silicon-Core-Loader

Quantum Silicon Core Loader Primary Core: qslcl.asm v0.0.2 under development Assistant Module: qslcl.bin v0.7.4 Universal Controller: qslcl.py v2.2.2 Legally Protected Research - This project operates under established legal frameworks for security research, right to repair, and academic freedom...

wazuh-home-soc

Home SOC: Threat Detection Lab with Wazuh + Suricata A self-hosted Security Operations Center lab built to detect real attack techniques against a deliberately vulnerable target, using Wazuh as the SIEM and Suricata as a network-based IDS sensor. Built to demonstrate detection engineering skills ...

SOC-Multitool

SOC Multi-tool Introducing SOC Multi-tool, a free and open-source browser extension that makes investigations faster and more efficient. Now available on the Chrome Web Store and compatible with all Chromium-based browsers such as Microsoft Edge, Chrome, Brave, and Opera. Available on Chrome Web...

Elasticsearch_rules

Elasticsearchrules ElasticSearch Detection version of SOC prime watcher rules with some new Corelight rules Please note some of these rules should be tuned to your environment. To load in Elastic, download the ndjson and expand Security and go to alerts. Click on Managed Alerts and click import...