Terri-Lea-P/threat-hunting
GitHub: Terri-Lea-P/threat-hunting
一个威胁狩猎知识库,包含多种常见攻击场景的调查指南和标准化模板,帮助安全团队系统化开展威胁检测工作。
Stars: 0 | Forks: 0
# 威胁狩猎
```
threat-hunting
│
├── README.md
│
├── investigations
│ ├── th-001-suspicious-powershell.md
│ ├── th-002-impossible-travel.md
│ ├── th-003-suspicious-file-downloads.md
│ ├── th-004-bruteforce-logons.md
│ ├── th-005-data-staging-archive.md
│ └── th-006-suspicious-external-connections.md
│
├── screenshots
│ ├── th-001-query-results.png
│ └── th-002-log-analysis.png
│
└── templates
└── investigation-template.md
```
标签:威胁狩猎, 安全审计, 安全运营, 扫描框架, 日志分析, 蓝队