Chau143/OpenCTI-Splunk-CTI-Lab-

GitHub: Chau143/OpenCTI-Splunk-CTI-Lab-

一个展示 OpenCTI 威胁情报平台与 Splunk SIEM 集成的实验项目,涵盖 IOC 导入、情报管理与日志检测的完整流程。

Stars: 0 | Forks: 0

# OpenCTI-Splunk-CTI-Lab- 网络威胁情报与 OpenCTI 和 Splunk SIEM 的集成 -Screenshots/ 01/OpenCTI-dashboard Screenshot (43) 02/Docker-containers Screenshot (46) 03/Import-IOC Screenshot (47) 04/Observables Screenshot (53) 05/Observable-details Screenshot (54) 06/Splunk-home Screenshot (55) 07/Log-upload Screenshot (62) 08/Firewall-search Screenshot (63) 09/ioc-detection Screenshot (56)
标签:Docker, OpenCTI, 威胁情报, 安全运营, 安全防御评估, 实验室, 开发者工具, 扫描框架, 请求拦截