Popular repositories Loading

1. powershell-threat-detection powershell-threat-detection Public

   Windows-based SOC detection lab for identifying suspicious PowerShell activity using Security Event ID 4688.

   PowerShell 1

2. Windows-SOC-Incident-Investigation Windows-SOC-Incident-Investigation Public

   Hands-on Windows SOC investigation using PowerShell, Event ID 4688 and Event ID 4104

   1

3. wazuh-windows-security-monitoring wazuh-windows-security-monitoring Public

   Hands-on Wazuh SOC lab for Windows security monitoring, PowerShell detection, custom rules, and MITRE ATT&CK mapping.

   1