https://github.com/iknowjason/bluecloud

Cyber Range including Velociraptor + HELK system with a Windows VM for security testing and R&D. Azure and AWS terraform support.
https://github.com/iknowjason/bluecloud

blue-team cyber-range cyberrange dfir dfir-automation edr-testing pentesting purpleteam

Last synced: 3 months ago
JSON representation

Cyber Range including Velociraptor + HELK system with a Windows VM for security testing and R&D. Azure and AWS terraform support.

• Host: GitHub
• URL: https://github.com/iknowjason/bluecloud
• Owner: iknowjason
• License: mit
• Created: 2021-04-02T13:51:36.000Z (about 4 years ago)
• Default Branch: master
• Last Pushed: 2022-11-02T10:18:34.000Z (over 2 years ago)
• Last Synced: 2025-01-12T11:33:42.712Z (5 months ago)
• Topics: blue-team, cyber-range, cyberrange, dfir, dfir-automation, edr-testing, pentesting, purpleteam
• Language: HTML
• Homepage: https://blue.iknowjason.io
• Size: 30.6 MB
• Stars: 128
• Watchers: 7
• Forks: 28
• Open Issues: 5
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# Overview

Cyber Range deployment of HELK and Velociraptor!  Automated terraform deployment of one system running HELK + Velociraptor server with one registered Windows endpoint in Azure or AWS.  A collection of Terraform and Ansible scripts that automatically (and quickly) deploys a small HELK + Velociraptor R&D lab.

![](images/bce.png)

# Use Cases

* EDR Testing lab 

* Penetration Testing lab

* SIEM / Threat Hunting / DFIR / Live Response lab with HELK + Velociraptor [1, 2]

* Data Science research with HELK server, Jupyter notebooks

* Detection Engineering research with Mordor [3, 4]

# Documentation

Please see the full documentation for details and getting started with installation.

[Full Documentation Site](https://blue.iknowjason.io)