Salehswt/AFTERMATH

A SOC detection & response lab that boots already compromised. One command sets up an Elastic SIEM, vulnerable victims and a staged intrusion, so you start where a real investigation starts.

语言：PowerShell · GitHub 星标：14 · Fork：1

话题：blue-team · dfir · docker · elastic · incident-response · mitre-attack · siem · soc

在 GitHub 上查看原仓库