mazyaar/wireshark_threat_hunting

Stars
2
Language
License
The Unlicense
Created almost 2 years ago
Updated about 1 year ago

mazyaar/wireshark_threat_hunting

mazyaar

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Useful Wire shark command for threat hunting

Sysmon_Utility_MITRE_ATTACK

Investigate Attack Patterns using SIEM, Sysmon Utility and MITRE ATT&CK

Pattern_Recognition

Use Histogram and Parzen Window to estimate Kenrnel Density Estimation and Plot Figure for Pattern Recognition

Windows_Forensic_Investigation_8_parts

When conducting an investigation on a Windows machine there are 8 phase to go through, today we’ll discuss the first ‘Collecting Volatile Information’, and the rest will be explained in future topics

DNS_Incident_Response

DNS Incident Response

Ubuntu_DNS_Server_Bind9

UBUNTU DNS SERVER WITH BIND9

Gre_Tunnel_bash

making a Tunnel between two VPS that one of which is in Iran and another VPS occur on a foreign country and send the traffics to a foreign data center and use free internet. with this bash script, you can make a tunnel between two servers

Postfix_Dovcout_Opendkim_Roundcube

Install and Configuration Webmail By Postfix Dovcout Opendkim Roundcube

make_valid_SSL_with_acme

make valid SSL with acme

IPv6_Tutorial

Lpic101_Note

Lpic101_Note for beginner

UBUNTU_NTP_SERVER

Ubuntu NTP Server Configurations

openssl_bashscript

Make CA root server and Certificate for web Server with openssl Script.

THREAT_HUNTING_PLAYBOOKS

Starting your first threat hunting