Links-of-Interest

Interesting or useful links, guides, and tutorials go here. This will eventually be organized, notated, and further developed.

https://www.honeynet.org/projects/

https://tria.ge/dashboard

https://github.com/Johnng007/Live-Forensicator

https://malpedia.caad.fkie.fraunhofer.de/

DetectionLab training and lab creation scripts and guides

https://detectionlab.network/introduction/

Building an Open Source Threat Intelligence Platform with STIX

Through the Eyes of the Adversary: How to Build a Threat Intel Program

ACTIVE DIRECTORY #00 Creating our Server + Workstation Virtual Environment

how to unravel Cobalt Strike and deny the adversary further access

https://threadreaderapp.com/thread/1559482618873356289.html

How to Create a MISP Feed from a Greynoise Trend 2022-08-03

https://droogy.tech/post/gntrendsandmisp/

https://malapi.io/ - MalAPI.io maps Windows APIs to common techniques used by malware.

https://www.cisecurity.org/insights/blog/threat-integration-lessons-of-indicator-and-incident-exchange Threat Integration: Lessons of Indicator & Incident Exchange

https://www.ventoy.net/en/index.htmlGRUB - Based boot loader for managing multiple images on bootable USB

https://tb.rg-adguard.net/public.php - a project that will help you without tedious search and registration to download Windows operating systems, Office applications, language packs, and virtual machines directly from Microsoft servers.

FOR608 Tools

Inside FOR608: Enterprise-Class Incident Response & Threat Hunting - Course Preview

CyLR - {$DEFINE}

https://github.com/orlikoski/CyLR

KAPE - {$DEFINE}

https://github.com/EricZimmerman/KapeFiles

Velociraptor - {$DEFINE}

https://github.com/Velocidex/velociraptor

https://tryhackme.com/room/velociraptorhp

https://lolbas-project.github.io/

https://github.com/SigmaHQ/sigma