TOOSHY2/Ashford-Grove-SOC

Evidence-backed SOC L1 portfolio: 100 detection and investigation scenarios across 16 MITRE ATT&CK categories — including false-positive triage, proactive threat hunting, and insider-threat analysis. From a segmented enterprise lab, entirely open-source.

语言：PowerShell · GitHub 星标：4 · Fork：0

话题：active-directory · blue-team · cybersecurity · detection-engineering · dfir · incident-response · mitre-attack · security-onion

在 GitHub 上查看原仓库