Repository for SOC analysts, queries to investigate, advanced hunting, sites for analysis, malware samples, courses to improve skills, IOC and monitoring.

ShadowWall AI is a cutting-edge, enterprise-grade cybersecurity platform that employs artificial intelligence, machine learning, and advanced deception techniques to provide comprehensive protection against sophisticated cyber threats. Designed for security professionals, SOC teams, and organizations requiring proactive threat defense.

Wazuh SIEM SOC Analyst Training Manual WITH THINGS A NEWBIE MUST KNOW BEFORE USING THE WAZUH.

Automated Python script that parses Linux auth logs to detect SSH brute force attacks and generate incident reports

Hey 👋, This Lab was made by Riad Moudjahed, a friendly malware analysis lab. "README" contains everything you need.

Learning how to use REDLINE with THM. A tool I do not know of nor have not heard of.

I set up a Security Operations Center (SOC) automation project (home lab). Using Wazuh, TheHive, and Shuffle, I explore how automation enhances incident response, accelerates threat detection, and streamlines SOC workflows.

Credentialed Nessus vulnerability assessment on a Windows 11 VM, with evidence screenshots, severity analysis, Graylog dashboard visualization, and a remediation plan. Demonstrates the full vulnerability management lifecycle from discovery to prioritization.

🛡️ All-in-One IOC Lookup & Extraction Tool - 28 Threat Intel Sources

A comprehensive technical audit and penetration testing lab focused on SSH exploitation, MITRE ATT&CK mapping, and Linux forensic log analysis.

Incident Response case study focused on network packet dissection, cleartext credential harvesting, and TLS 1.3 encrypted session analysis.

DexSentinel is a high-performance, real-time threat intelligence aggregator designed to provide global visibility into attack surface pressure. It correlates live telemetry with public OSINT feeds to offer a unified dashboard for security researchers and SOC analysts.

CLI version of File Integrity Monitoring application. A portable python based FIM tool that tracks modified files from base folder