Python 9 PowerShell 5 YARA 2 JavaScript 1 Go 1 SCSS 1 Shell 1

Globally (SOC and CERT/CSIRT) 54 Recommended sources 48 Critical tools for CSIRT 42 Must read 39 Nice to read 38 Critical sensors for a SOC 30 📖 **Nice to Read** 22 For a CERT/CSIRT 20 SOC sensors, nice to have 19 For a SOC 18 Critical tools for a SOC/CSIRT 14 Other critical tools for a SOC and a CERT/CSIRT 11 Harden SOC/CSIRT environment 10 📚 **Must Read** 9 Disconnect (as much as possible) SOC from monitored environment 5 SOC core 4 Have a single and centralized platform ('single console') 1 License 1 SOC and CSIRT core 1

SOC architecture of detection 143 Endpoints hardening: 107 **Standards & Controls** 9 **Miscellaneous Resources** 6 SOC/CSIRT architecture of detection 5 **Tools & Architectures** 4 Enclave: 4 From logs to alerts: global generic workflow 3 **Cloud & Platforms** 2 **SOC Tools & Architectures** 2 **Frameworks & Methodologies** 2 **Incident Response** 2 **Benchmarks & Surveys** 2 **Compliance & Regulations** 1 **Use Cases & Implementations** 1 **Threat Intelligence** 1

security 6 dfir 4 cybersecurity 4 awesome-list 3 mitre-attack 3 incident-response 3 contributions-welcome 2 catalog 2 yara-rules 2 yara 2 powershell 2 sigma 2 threat-hunting 2 signature 2 scanner 2 forensics 2 ioc 2 hash 2 windows 2 contributors-welcome 2 cybersecurity-playbook 2 incident-management 2 privacy 2 incidents 2 infosec 2 mitre 2 playbook 2 awesome 2 python 1 otx 1 automation 1 cyber 1 debloat 1 honeyd 1 honeypot 1 list 1 blue-team 1 computer-security 1 defensive-security 1 auditing 1 aws 1 azure 1 cloud 1 gcp 1 firewall-segmentation 1 firewalling 1 network-isolation 1 network-security 1 network-segmenation 1 network-segment 1