awesome-lists
Awesome Security lists for SOC/CERT/CTI
https://github.com/mthcht/awesome-lists
Last synced: 16 days ago
JSON representation
-
Other Lists
-
π§ͺ LAB
- Deployment - ansible
- SOC - Use Case Factory Automation - DetectIQ
- Honeypot - Certiception (ADCS honeypot)
- Honeypot - cowrie
- Maldev - Defense Evasion - avred
- Maldev - Defense Evasion - gocheck
- Detection Agent - Sandfly linux agent
- Log Forwarder - openwec (windows event forwarder)
- Threat Hunting Platform - deephunter
- Windows Logs - Sysmon
- LInux Logs - ossec
- Linux Logs - ecapture (SSL/TLS)
- Linux Logs - tracee
- Linux Logs - auditd
- Linux Logs - SysmonForLinux
- Linux Logs - kunai
- CTI - MISP
- Code analysis
- IR platform - rAIdline
- IR platform - FIR
- Challenges - DFIR LABS
- Log samples - Splunk Attack range
- IT - Remote connections manager - xpipe
- Endpoint Security - Windows Hardening - Harden-Windows-Security
- Endpoint Security - Linux Hardening - lynis
- Endpoint Security - Linux - apparmor
- Endpoint Security - Linux - apparmor
-
LAB
-
π¦ Others
-
Others
-
ποΈ Podcasts
-
π Security News
- ahnlab apt feed
- ahnlab cert feed
- ahnlab phishing feed
- ahnlab trend feed
- Akamai blog feed
- Any.run malware analysis blog feed
- Avast Blog feed
- badsectorlabs Last week in security - Redteam
- bi-zone blog feed
- bitdefender labs feed
- Blackberry blog
- broadcom blog feed
- CERT LV feed
- CERT PL feed
- CERT SE feed
- CERT SI feed
- CERT UA feed
- CIRT bd feed
- CISA news feed
- Cisco Talos
- Cloudfare security feed
- crowdstrike counter adversary operations blog
- deepinstinct blog
- detect.fyi
- Detection engineering weekly
- drweb virus alert feed
- eclecticiq threat intel
- elastic security labs blog feed
- forcepoint lab blog
- genians threat intel feed
- gi7w0rm threat intel feed
- Google Project Zero blog feed
- Google threat intelligence feed
- Google Threat analysis feed
- Group-IB feed
- harfanglab lab feed
- hexacorn blog feed
- hunt.io blog
- huntress blog feed
- IC3 CSA feed
- Infostealers Hub News Feed
- infostealers reports feed
- Intrinsec feed
- isc sans edu feed
- JPCERT feed
- krebsonsecurity feed
- malwarebytes blog feed
- malwaretech feed
- mcafee labs feed
- Microsoft security blog feed
- Microsoft Incident response ninja hub
- Microsoft Threat Intel feed
- morphisec threat research
- nccgroup research blog security
- NCSC news feed
- NIST cybersecurity insights feed
- orangecyberdefense Intel
- outpost24 research and threat intel feed
- proofpoint threat insight
- Qualys Threat research feed
- reversinglabs threat research
- security.com threat intel
- securityaffairs apt feed
- securityweek feed
- securlist apt targeted attacks feed
- Sekoia blog feed
- SentinelOne labs feed
- seqrite techical blog
- Simone Kraus blog feed
- Sybersecyrity news feed
- Talos feed
- threat connect blog feed
- threatlabz zscaler blog
- threatpost feed
- trendmicro security feed
- Trustwave blog feed
- Unit42 feed
- Unit42 feed
- virusbulletin feed
- volexity blog feed
- welivesecurity feed
- tl;dr sec newsletter
- CIRT bd feed
- trendmicro security feed
- orangecyberdefense Intel
- ahnlab cert feed
- ahnlab trend feed
- nccgroup research blog security
- claroty team82 research
- virusbulletin
-
Security News
- CERT-FR
- CERT FR Alerts
- CERT FR Avis
- JPCERT
- CISA news
- thedfirreport Feed
- Splunk Research Blog
- Unit42 Feed
- akamai Feed
- Elastic Blog
- Cisco Talos Feed
- Crowdstrike Feed
- Hexacorn Blog
- simone kraus Blog
- Michael Haag Blog
- EricaZelic Blog
- Adam Chester Blog Feed
- Mauricio Velazco Blog
- ClΓ©ment Notin Feed
- tenable Blog
- horizon3 Feed
- Incidents reports Feed
- NCC Group Research Feed
- SpecterOps Feed
- Sophos Research Feed
- Offensive Research - DSAS by INJECT
- HackerNews Feed
- Bleepingcomputer Feed
- detect.fyi
- detect.fyi
- detect.fyi
- Google Threat Intelligence
- Sekoi Blog
- detect.fyi
- detect.fyi
- detect.fyi
- detect.fyi
- detect.fyi
- detect.fyi
- DFIR Podcasts
- DFIR weekly news
- sans blog
- detect.fyi
- detect.fyi
- detect.fyi
- detect.fyi
- detect.fyi
-
Programming Languages
Categories
Sub Categories
π Security News
90
π‘οΈ DFIR:
75
π« IOC Feeds/Blacklists:
61
Security News
51
π΅οΈββοΈ Investigation
48
π Knowledge sites
42
Investigation
39
π§ͺ LAB
37
Data manipulation
32
Books
32
πΊ Youtube/Twitch channels
31
π TI TTP/Framework/Model/Trackers
25
Youtube/Twitch channels
19
Detection Resources
19
Sandbox
17
Training
17
ποΈ Podcasts
14
LAB
13
π¬ Discord /Slack channels
9
π Training
8
Others
6
Knowledge sites
6
π§© Data manipulation
5
π₯οΈ SIEM/SOC/PurpleTeam related:
5
π‘ Detection Resources
5
IOC Feeds/Blacklists:
3
π¦ Others
3
π Books
3
TI TTP/Framework/Model/Trackers
2
More TI
1
π Github
1
TI
1
Formations
1
Content creation
1
DFIR
1
Keywords
security
28
threat-hunting
23
dfir
22
threat-intelligence
19
cybersecurity
17
incident-response
17
malware-analysis
14
forensics
14
windows
12
malware
12
linux
11
awesome-list
9
threatintel
9
powershell
8
detection
7
python
7
blueteam
7
malware-research
7
soc
6
siem
6
security-tools
6
infosec
6
cti
6
detection-engineering
6
mitre-attack
5
yara-rules
5
redteam
5
sigma
5
awesome
5
splunk
5
endpoint-security
4
macos
4
active-directory
4
docker
4
digital-forensics
4
golang
4
iocs
4
threat-detection
4
memory-forensics
4
malware-detection
4
apt
4
threat-analysis
4
intrusion-detection
4
misp
4
rust
4
forensic
4
reverse-engineering
4
ioc
4
timeline
4
javascript
3