Name		Name	Last commit message	Last commit date
Latest commit History 25 Commits
dfir-challenges		dfir-challenges
soc-simulator		soc-simulator
README.md		README.md

Repository files navigation

boxes-blue_team

Professional SOC investigation reports for HackTheBox, TryHackMe and others machines, focused on detection, triage, and incident response.

About

SOC investigations traced end to end in Splunk - APT28 initial access, T1053 persistence, phishing, staging and exfiltration - mapped to MITRE ATT&CK. Plus DFIR challenge write-ups.

blue-team dfir incident-response mitre-attack soc splunk threat-hunting

0 stars

0 watching

Report repository

Releases

Packages

Contributors