Popular repositories Loading

1. wazuh-soc-training wazuh-soc-training Public

   SOC analyst training platform for Wazuh — injects labeled attacks into a live manager; trainees triage in the real dashboard; auto-graded. Scripted virtual-endpoint lab included.

   Python 3 1

2. soc-qilin soc-qilin Public

   Qilin (Agenda) ransomware group tracker — victims, leak-site posts, TTPs and IOCs for the Qilin RaaS operation in a single dashboard

   Python 1

3. soc-threatmap soc-threatmap Public

   Live global threat/attack map — animated arcs of geolocated events, offline GeoIP, dependency-free Python.

   Python 1

4. wazuh-attackmap wazuh-attackmap Public

   Norse-style live attack map for Wazuh — a dependency-free Python service that streams animated arcs of real Wazuh alert source IPs onto a full-screen canvas. Read-only, no plugin, upgrade-proof.

   Python 1 1

5. wazuh-full-soc wazuh-full-soc Public

   One-command, self-hosted Security Operations Center: installs Wazuh SIEM all-in-one plus 18 linked tools (AI alert triage, threat intel, vuln mgmt, incident response, attack map, CyberChef, SpiderF…

   Shell 1

6. soc-attack-surface soc-attack-surface Public

   External attack surface monitor — tracks exposed ports, domains, subdomains and TLS certificate expiry for your own estate, and alerts on new exposure

   Python