Blue Team

#blueteam #dfir #endpoint #microsoft #defender 𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁 𝗗𝗲𝗳𝗲𝗻𝗱𝗲𝗿 𝗳𝗼𝗿 𝗘𝗻𝗱𝗽𝗼𝗶𝗻𝘁 𝗰𝘂𝗿𝗮𝘁𝗲𝗱 𝗹𝗶𝘀𝘁 𝗼𝗳 𝗿𝗲𝘀𝗼𝘂𝗿𝗰𝗲𝘀 𝗳𝗼𝗿 𝗗𝗙𝗜𝗥 A curated list of resources for DFIR through Microsoft Defender for Endpoint Link 🔗:- https://github.com/cyb3rmik3/MDE-DFIR-Resources @BlueTeamKit

#blueteam #intrusion #detection #kubernetes #soc #threat_hunting 𝗘𝗟𝗞𝗘𝗜𝗗 - 𝗕𝘆𝘁𝗲𝗱𝗮𝗻𝗰𝗲 𝗖𝗹𝗼𝘂𝗱 𝗪𝗼𝗿𝗸𝗹𝗼𝗮𝗱 𝗣𝗿𝗼𝘁𝗲𝗰𝘁𝗶𝗼𝗻 𝗣𝗹𝗮𝘁𝗳𝗼𝗿𝗺 ⛓️ It is an open source solution that can meet the security requirements of various workloads such as hosts, containers and K8s, and serverless. It is derived from ByteDance's internal best practices Link 🔗:- https://github.com/bytedance/Elkeid @BlueTeamKit

#blueteam #threat_hunting #windows_logs 𝘾𝙃𝘼𝙄𝙉𝙎𝘼𝙒 ⛓️ It provides a powerful ‘first-response’ capability to quickly identify threats within Windows event logs Link 🔗:- https://github.com/WithSecureLabs/chainsaw @BlueTeamKit

#blueteam #ntlm #kerberos #active_directory 𝙎𝙚𝙘𝙪𝙧𝙞𝙩𝙮 𝙤𝙛 𝙉𝙏𝙇𝙈 𝙖𝙣𝙙 𝙆𝙚𝙧𝙗𝙚𝙧𝙤𝙨 𝙖𝙪𝙩𝙝𝙚𝙣𝙩𝙞𝙘𝙖𝙩𝙞𝙤𝙣 𝙥𝙧𝙤𝙩𝙤𝙘𝙤𝙡𝙨 𝙞𝙣 𝙖𝙣 𝘼𝙘𝙩𝙞𝙫𝙚 𝘿𝙞𝙧𝙚𝙘𝙩𝙤𝙧𝙮 𝙚𝙣𝙫𝙞𝙧𝙤𝙣𝙢𝙚𝙣𝙩 Link 🔗:- https://wwwgeneral.github.io/posts/la-s%C3%A9curit%C3%A9-des-protocoles-d-authentification-ntlm-et-kerberos-en-environnement-active-directory/ @BlueTeamKit

𝘼𝙇𝙇-𝙄𝙉-𝙊𝙉𝙀 𝘼𝙒𝙀𝙎𝙊𝙈𝙀 𝘾𝙔𝘽𝙀𝙍𝙎𝙀𝘾 𝙍𝙀𝙎𝙊𝙐𝙍𝘾𝙀𝙎 🗿 (All open source resources) •Awesome Red Team Ops :- https://github.com/CyberSecurityUP/Awesome-Red-Team-Operations •Awesome Red Teaming :- https://github.com/yeyintminthuhtut/Awesome-Red-Teaming •Awesome Red Team ToolKit :- https://0x1.gitlab.io/pentesting/Red-Teaming-Toolkit/ •Awesome Blue Team Ops :- https://github.com/fabacab/awesome-cybersecurity-blueteam •Awesome OSINT :- https://github.com/jivoi/awesome-osint •Awesome DevSecOps :- https://github.com/devsecops/awesome-devsecop •Awesome Pentest :- https://github.com/enaqx/awesome-pentest •Awesome Cloud Pentest :- https://github.com/CyberSecurityUP/Awesome-Cloud-PenTest •Awesome Shodan :- https://github.com/jakejarvis/awesome-shodan-queries •Awesome AWS Security :- https://github.com/jassics/awesome-aws-security •Awesome Malware Analysis & Reverse Engineering :- https://github.com/CyberSecurityUP/Awesome-Malware-Analysis-Reverse-Engineering •Awesome Malware Analysis:- https://github.com/rshipp/awesome-malware-analysis •Awesome Computer Forensic :- https://github.com/cugu/awesome-forensics •Awesome Cloud Security :- https://github.com/4ndersonLin/awesome-cloud-security •Awesome Reverse Engineering :- https://github.com/tylerha97/awesome-reversing •Awesome Threat Intelligence :- https://github.com/hslatman/awesome-threat-intelligence •Awesome SOC :- https://github.com/cyb3rxp/awesome-soc •Awesome Social Engineering :- https://github.com/v2-dev/awesome-social-engineering •Awesome Web Security :- https://github.com/qazbnm456/awesome-web-security#prototype-pollution •Awesome Forensics :- https://github.com/cugu/awesome-forensics •Awesome API Security :- https://github.com/arainho/awesome-api-security •Awesome WEB3 :- https://github.com/Anugrahsr/Awesome-web3-Security •Awesome Incident Response :- https://github.com/Correia-jpv/fucking-awesome-incident-response •Awesome Search Engines :- https://github.com/edoardottt/awesome-hacker-search-engines •Awesome Smart Contract Security:- https://github.com/saeidshirazi/Awesome-Smart-Contract-Security •Awesome Terraform :- https://github.com/shuaibiyy/awesome-terraform •Awesome Cloud Pentest :- https://github.com/CyberSecurityUP/Awesome-Cloud-PenTest •Awesome Burpsuite Extensions :- https://github.com/snoopysecurity/awesome-burp-extensions •Awesome IOT :- https://github.com/phodal/awesome-iot/blob/master/README.md •Awesome IOS Security :- https://github.com/Cy-clon3/awesome-ios-security •Awesome Embedded & IOT Security :- https://github.com/fkie-cad/awesome-embedded-and-iot-security •Awesome OSINT Bots :- https://github.com/ItIsMeCall911/Awesome-Telegram-OSINT#-bots •Awesome IOT Hacks :- https://github.com/nebgnahz/awesome-iot-hacks •Awesome WEB3 Security:- https://github.com/Anugrahsr/Awesome-web3-Security •Awesome Security :- https://github.com/sbilly/awesome-security •Awesome Reversing :- https://github.com/tylerha97/awesome-reversing •Awesome Piracy :- https://github.com/Igglybuff/awesome-piracy •Awesome Web Hacking :- https://github.com/infoslack/awesome-web-hacking •Awesome Memory Forensics :- https://github.com/digitalisx/awesome-memory-forensics •Awesome OSCP :- https://github.com/0x4D31/awesome-oscp •Awesome RAT :- https://github.com/alphaSeclab/awesome-rat

#blueteam #homelabs #resources 𝘽𝙇𝙐𝙀𝙏𝙀𝘼𝙈 𝙃𝙊𝙈𝙀-𝙇𝘼𝘽𝙎 🔵 https://github.com/aboutsecurity/blueteam_homelabs @BlueTeamKit

#blueteam #active_directory #resources 𝘼𝙩𝙩𝙖𝙘𝙠𝙞𝙣𝙜 𝘼𝙘𝙩𝙞𝙫𝙚 𝘿𝙞𝙧𝙚𝙘𝙩𝙤𝙧𝙮 Link 🔗:- https://zer1t0.gitlab.io/posts/attacking_ad/ @BlueTeamKit

#blueteam #malware_analysis #darkcrystal #dcrat 𝘿𝙚𝙚𝙥 𝘿𝙞𝙫𝙚 𝙞𝙣𝙩𝙤 𝘿𝘾𝙍𝘼𝙏/𝘿𝙖𝙧𝙠𝘾𝙧𝙮𝙨𝙩𝙖𝙡𝙍𝘼𝙏 𝙈𝙖𝙡𝙬𝙖𝙧𝙚 👾 Link 🔗:- https://muha2xmad.github.io/malware-analysis/dcrat/ @BlueTeamKit

#blueteam #books 𝘼𝙒𝙀𝙎𝙊𝙈𝙀 𝘽𝙇𝙐𝙀 𝙏𝙀𝘼𝙈𝙄𝙉𝙂 𝙃𝘼𝙉𝘿𝘽𝙊𝙊𝙆𝙎 Link 🔗:- https://github.com/0xsyr0/Awesome-Cybersecurity-Handbooks/blob/main/handbooks/blue_teaming.md @BlueTeamKit

#blueteam #apk #malware 𝘼𝙍𝙏𝙀𝙈𝙄𝙎 🤖 APK Infrastructure Investigator Link 🔗:- http://www.kitploit.com/2023/07/artemis-apk-infrastructure-investigator.html @BlueTeamKit

#blueteam #bypass #kerberos 𝙆𝙍𝘽-𝙐𝘼𝘾-𝘽𝙔𝙋𝘼𝙎𝙎 🛟 UAC Bypass By Abusing Kerberos Tickets Link 🔗:- https://github.com/wh0amitz/KRBUACBypass @BlueTeamKit

#blueteam #edr #bypass 𝘼𝙒𝙀𝙎𝙊𝙈𝙀 𝙀𝘿𝙍 𝘽𝙔𝙋𝘼𝙎𝙎 🤡 Awesome EDR Bypass Resources For Ethical Hacking Link 🔗:- https://github.com/tkmru/awesome-edr-bypass @BlueTeamKit