ennduka86-spec/Cybersecurity-Portfolio

# Cybersecurity-Portfolio ## 🔐 概述 此仓库包含用于 SOC 运营、日志解析和应急响应的自动化脚本和工作流。 与我在 **SIEM (Splunk, Microsoft Sentinel)**、**EDR (CrowdStrike)** 以及 **漏洞管理 (Qualys, Nessus)** 方面的专业经验相契合。 # SOC 自动化脚本 [](ca://s?q=Add_build_status_badge_to_GitHub_repo) [](ca://s?q=Add_security_scan_badge_to_GitHub_repo) [](ca://s?q=Add_license_badge_to_GitHub_repo) [](ca://s?q=Add_programming_language_badge_to_GitHub_repo) ``` ##📂 Repository Structure ```text /scripts log_parser.py vuln_validation.ps1 /playbooks mitre_attack_mapping.md /docs incident_response_template.md ``` ### 🚀 *入门* ### Clone the repo - Install dependencies (pip install -r requirements.txt) - Run scripts with sample log files in /data - Review Mermaid diagrams in README for workflow context ### 🔮 *未来工作* - Splunk detection queries - AWS GuardDuty automation scripts - Compliance audit dashboards ---- ## 📜 License MIT License — free to use and adapt with attribution. ``` ## 📊 工作流图 (Mermaid) ### 应急响应生命周期 ``` flowchart TD A[Alert]:::red --> B[Triage]:::orange --> C[Escalation]:::yellow --> D[Containment]:::green --> E[Eradication]:::lightblue --> F[Recovery]:::blue --> G[Lessons]:::purple classDef red fill:#ff4d4d,color:#fff,stroke:#333,stroke-width:1px; classDef orange fill:#ffa64d,color:#fff,stroke:#333,stroke-width:1px; classDef yellow fill:#ffeb3b,color:#000,stroke:#333,stroke-width:1px; classDef green fill:#4caf50,color:#fff,stroke:#333,stroke-width:1px; classDef lightblue fill:#03a9f4,color:#fff,stroke:#333,stroke-width:1px; classDef blue fill:#3f51b5,color:#fff,stroke:#333,stroke-width:1px; classDef purple fill:#9c27b0,color:#fff,stroke:#333,stroke-width:1px; ``` ### 漏洞管理流程 ``` flowchart LR A[Scan]:::red --> B[Prioritize]:::orange --> C[Remediate]:::yellow --> D[Validate]:::green --> E[Report]:::blue classDef red fill:#ff4d4d,color:#fff,stroke:#333,stroke-width:1px; classDef orange fill:#ffa64d,color:#fff,stroke:#333,stroke-width:1px; classDef yellow fill:#ffeb3b,color:#000,stroke:#333,stroke-width:1px; classDef green fill:#4caf50,color:#fff,stroke:#333,stroke-width:1px; classDef blue fill:#3f51b5,color:#fff,stroke:#333,stroke-width:1px; ```

标签：AI合规, EDR, Go语言工具, GPT, 子域名变形, 安全运营中心, 库, 应急响应, 应用安全, 数字取证, 漏洞管理, 网络安全, 网络映射, 脆弱性评估, 自动化脚本, 逆向工具, 隐私保护