Ahmed-Emad-Nasr/SOC-Environment

GitHub: Ahmed-Emad-Nasr/SOC-Environment

这是一个集成了 Wazuh、Suricata 和 Atomic Red Team 的自动化 SOC 环境,旨在通过模拟攻击和实时监控实现威胁检测与自动响应。

Stars: 10 | Forks: 0

# 🛡️ 具备自动化可疑行为检测的 SOC 环境 ### 作者 **Ahmed Emad Eldeen Abdelmoneam** 使用 **Wazuh SIEM 和 EDR**、**Atomic Red Team**、**YARA**、**Suricata (IDS)**、**VirusTotal 自动清除**、**3omda 定制规则**、**SocSOCFortress Wazuh 规则** ![License](https://img.shields.io/badge/License-MIT-blue.svg) ![Contributions Welcome](https://img.shields.io/badge/Contributions-Welcome-brightgreen.svg) ![Platform](https://img.shields.io/badge/Platform-Linux%20%7C%20Windows-lightgrey.svg) ![Security](https://img.shields.io/badge/SOC-Security_Operations_Center-critical.svg) ![Wazuh](https://img.shields.io/badge/Wazuh-%23000000?style=flat&logo=wazuh&logoColor=white) ![Atomic Red Team](https://img.shields.io/badge/Atomic_Red_Team-%23FF6A00?style=flat&logo=atom&logoColor=white) ![Suricata](https://img.shields.io/badge/Suricata-%230078D7?style=flat&logo=suricata&logoColor=white) ![Hacking / Kali](https://img.shields.io/badge/Hacking-%23A0B0C0?style=flat&logo=kali-linux&logoColor=white) ![YARA](https://img.shields.io/badge/YARA-%23219827?style=flat&logo=yara&logoColor=white) ![VirusTotal](https://img.shields.io/badge/VirusTotal-%23FF4747?style=flat&logo=virustotal&logoColor=white) ![FIM (File Integrity Monitoring)](https://img.shields.io/badge/FIM-%23663399?style=flat&logo=sqlite&logoColor=white) ![Auditing & Logging](https://img.shields.io/badge/Auditing_%26_Logging-%23007ACC?style=flat&logo=elastic&logoColor=white) ![Firewall Hardening](https://img.shields.io/badge/Firewall-Hardening-%230F172A?style=flat&logo=linux&logoColor=white)