awesome-cybersecurity-blueteam
awesome-incident-response
| awesome-cybersecurity-blueteam | awesome-incident-response | |
|---|---|---|
| 4 | 4 | |
| 4,025 | 7,145 | |
| - | - | |
| 4.1 | 6.1 | |
| 4 months ago | about 1 month ago | |
| - | Apache License 2.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
awesome-cybersecurity-blueteam
-
SIEM content development
There's a ton of valuable resources out there when searching for "detection engineering", beyond that, check https://research.splunk.com/ to get an idea of a structured and contextual approach. Beyond that, check Rob van Os Magma use case framework and any blog you can find on https://correlatedsecurity.com (Jurgen Visser). Last but not least, anything "awesome" on github, e.g. https://github.com/fabacab/awesome-cybersecurity-blueteam
-
SIEM - how logs/events are dealt with
Add the latest edition of the MITRE SOC strategies book (https://www.mitre.org/sites/default/files/publications/11-strategies-of-a-world-class-cybersecurity-operations-center.pdf) and potentially add https://github.com/fabacab/awesome-cybersecurity-blueteam to your bookmarks.
- GitHub - fabacab/awesome-cybersecurity-blueteam: A curated collection of awesome resources, tools, and other shiny things for cybersecurity blue teams.
-
Good resources for first learning Cyber security?
for blue teaming :https://github.com/fabacab/awesome-cybersecurity-blueteam
awesome-incident-response
-
Cybersecurity Repositories
Incident Response
- Questions about getting into DF
-
I started a new role as a Incident Response Analyst and wanted to get some advice.
Here is a good github page that discusses tons of IR stuff. https://github.com/meirwah/awesome-incident-response
-
Has this sub done any curated reasearch collection sharing?
GitHub sounds totally viable. You might consider styling it after something like Awesome Lists. (Ex: Awesome Incident Response). But yes, totally viable.
What are some alternatives?
personal-security-checklist - 🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2024
Kuiper - Digital Forensics Investigation Platform
open-source-cs-python - Video discussing this curriculum:
cyberchef-recipes - A list of cyber-chef recipes and curated links
turbo-scanner - A port scanner and service detection tool that uses 1000 goroutines at once to scan any hosts's ip or fqdn with the sole purpose of testing your own network to ensure there are no malicious services running.
dfir-orc - Forensics artefact collection tool for systems running Microsoft Windows
awesome-security-feed - A semi-curated list of Security Feeds
DevSecOps - Ultimate DevSecOps library
awesome-security-hardening - A collection of awesome security hardening guides, tools and other resources
DFIRMindMaps - A repository of DFIR-related Mind Maps geared towards the visual learners!
cyber-security - My cyber security tools
awesome-sre - A curated list of Site Reliability and Production Engineering resources.