"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event s…

A port scanner and service detection tool that uses 1000 goroutines at once to scan any hosts IP or FQDN with the sole purpose of testing your own network to ensure there are no malicious services running.

Collection of PowerShell functinos and scripts a Blue Teamer might use

An easy to use tool built for incident response teams.

Windows RDP Brute Force Detection Lab using Splunk SIEM, Sysmon, Windows Event Logs, MITRE ATT&CK Mapping, Detection Engineering, and SOC Investigation Workflow.

Blue Team resources and tools

Introduction to SOC and related terminologies.

Blue Team home lab: 30 MITRE ATT&CK techniques attacked with Atomic Red Team on Windows 11 and detected in Splunk with custom SPL. Full detection-engineering writeups.