Terri-Lea-P/threat-hunting

GitHub: Terri-Lea-P/threat-hunting

一个威胁狩猎知识库,包含多种常见攻击场景的调查指南和标准化模板,帮助安全团队系统化开展威胁检测工作。

Stars: 0 | Forks: 0

# 威胁狩猎 ``` threat-hunting │ ├── README.md │ ├── investigations │ ├── th-001-suspicious-powershell.md │ ├── th-002-impossible-travel.md │ ├── th-003-suspicious-file-downloads.md │ ├── th-004-bruteforce-logons.md │ ├── th-005-data-staging-archive.md │ └── th-006-suspicious-external-connections.md │ ├── screenshots │ ├── th-001-query-results.png │ └── th-002-log-analysis.png │ └── templates └── investigation-template.md ```
标签:威胁狩猎, 安全审计, 安全运营, 扫描框架, 日志分析, 蓝队