awesome-soc

Awesome SOC An operational handbook and knowledge base to build, run and mature a SOC including CSIRT. Covering: SOC basics detection engineering threat intelligence SOC metrics/KPI SOC automation AI use cases and best practices SOP SOC playbooks Those are my view, based on my own experience as...

awesome-soc-analyst

awesome-soc-analyst 我们为 SOC 分析师和 SOC 分析师候选人收集了有用的资源。 该仓库由 LetsDefend 维护。欢迎在此添加新资源。 目录 书籍 恶意软件分析 实操实验室 钓鱼邮件分析 调查工具 网络日志来源 网络设备日志 Linux 防火墙日志 SMB 日志 Windows 防火墙日志 网络安全设备日志 IDS/IPS 日志 网络防火墙日志 Web 应用防火墙（WAF）日志 Web 服务器日志 Apache 日志 IIS 日志 Nginx 日志 取证痕迹 浏览器历史记录与缓存 DNS 缓存/历史记录 Hosts 文件...

awesome-soc — Updated!

Awesome SOC An operational handbook and knowledge base to build, run and mature a SOC including CSIRT. Covering: SOC basics detection engineering threat intelligence SOC metrics/KPI SOC automation AI use cases and best practices SOP SOC playbooks Those are my view, based on my own experience as...