5 matches found
BlueCloud
概述 HELK 和 Velociraptor 的网络靶场部署!使用自动化 terraform 在 Azure 或 AWS 中部署一个运行 HELK + Velociraptor 服务器的系统,并注册一个 Windows 端点。这是一组 Terraform 和 Ansible 脚本,可自动且快速地部署一个小型 HELK + Velociraptor 研发实验室。 用例 EDR 测试实验室 渗透测试实验室 使用 HELK + Velociraptor 的 SIEM / 威胁狩猎 / DFIR / 实时响应实验室 1, 2 使用 HELK 服务器、Jupyter Notebook 的数据科学研...
HELK
HELK Hunting ELK(简称 HELK)是首批具备高级分析功能的开源狩猎平台之一,它通过 Jupyter 笔记本和 Apache Spark 在 ELK 堆栈之上提供了 SQL 声明式语言、图形化、结构化流处理乃至机器学习等高级分析能力。该项目最初主要为研究而开发,但由于其灵活的设计和核心组件,在配置得当且基础设施具有可扩展性的情况下,也可以部署在更大规模的环境中。 目标 为社区提供一个开源的狩猎平台,并分享威胁狩猎的基础知识。 加快狩猎平台的部署时间。 以更简单、更经济的方式改进狩猎用例的测试与开发。 通过 Apache Spark、GraphFrames 和 Jupyter...
BlueCloud - Cyber Range including Velociraptor + HELK system with a Windows VM for security testing and R&D
Cyber Range deployment of HELK and Velociraptor! Automated terraform deployment of one system running HELK + Velociraptor server with one registered Windows endpoint in Azure or AWS. A collection of Terraform and Ansible scripts that automatically and quickly deploys a small HELK + Velociraptor R...
Mordor - Re-play Adversarial Techniques
The Mordor project provides pre-recorded security events generated by simulated adversarial techniques in the form of JavaScript Object Notation JSON files for easy consumption. The pre-recorded data is categorized by platforms, adversary groups, tactics and techniques defined by the Mitre ATT&CK...
HELK: one with the advanced analysis capabilities of vulnerability discovery platform-vulnerability warning-the black bar safety net
Today to introduce to you is a guy named HELK a tool, it is a superior analytical capability of Hunting ELK(Elasticsearch, Logstash, Kibana is. ! Target 1. To the security community to provide a free vulnerability Hunting platform, and shared some basic security threats and vulnerability discover...