navigation.md

Intro

Intro To SOC

• Linux CLI
• Memory Analysis (Volatility)
• TCPDump
• Web Log Review
• WindowsCLI
• Wireshark

• Nessus
• DeepBlueCLI
• Domain Log Review
• Understanding ASNs
• Velociraptor
• Firewall Log Review
• AC Hunter CE
• Hunting DCSync, Sharepoint and Kerberoasting
• Scapy

• Hayabusa

• RITA2

• Email Analysis

• ACHunter2

Intro To Security

• Applocker
• Atomic RedTeam and Bluespawn
• DeepBlueCLI
• Nessus
• Host Firewalls and Nmap
• Password Cracking
• Password Spraying
• External Password Spraying
• Responder
• RITA and AC Hunter
• Sysmon
• Web Testing
• AC Hunter CE
• PingCastle
• Azure IR
• Wireless

Cyber Deception/Active Defense

Network Honeypots

• Spidertrap
• Cowrie
• Portspoof
• HoneyPorts
• OpenCanary
• Beelzebub

Endpoint / Identity / AD deception

• HoneyBadger
• HoneyShare
• HoneyUser
• AdvancedC2

Web / Application

• WebHoneypot
• Glastopf
• ModSecurity
• Haraka

Malware capture & analysis

• Dioanea

DNS / Network tooling

• RITA
• DNSChef
• FakeNet-NG

Phishing / Social-engineering

• Canarytokens
• Canary Token Cloner
• GoPhish
• Mailoney

Red/Purple team detection testing

• Bluespawn
• Caldera

File / Data deception & auditing

• File Audit

---

How to Destroy the Cloud Lab Environment