blueteam-tools 开源项目推荐（126 个）

ihebski /DefaultCreds-cheat-sheet

汇集所有默认凭据，帮助蓝队/红队人员识别使用默认密码的设备

mthcht /awesome-lists

优秀的SOC/CERT/CTI安全列表

vectra-ai-research /Halberd

Halberd：多云代理攻击工具

DXC-0 /soc-ressources

Repository for SOC analysts, queries to investigate, advanced hunting, sites for analysis, malware samples, courses to improve skills, IOC and monitoring.

Nervi0z /btl1-field-notes

Field reference for BTL1 and Tier 1 SOC work — grep-ready cheatsheets, SPL queries, Volatility workflows, live response commands

intbjw /webshell-decryptor

通过获取到的webshell流量、url、key来还原攻击者使用webshell所做的操作。

chainski /ForceAdmin

Collection of script templates to create infinite UAC prompts forcing a user to run as admin ⚠

DamonMohammadbagher /Some_Pentesters_SecurityResearchers_RedTeamers

Some Pentesters, Security Researchers, Red Teamers which i learned from them a lot...

ugurrates /CABTA

CABTA (Blue Team Assistant) - AI-Powered SOC Platform for Threat Analysis, IOC Investigation & Email Forensics

jaschadub /VectorSmuggle

Research framework that quantifies how steganographic obfuscation of embeddings defeats off-the-shelf statistical detection in RAG pipelines, paired with the VectorPin cryptographic-provenance defense

OsmanKandemir /web-wordlist-generator

WEB-Wordlist-Generator creates related wordlists after scanning your web applications.

tuckner /automation-capability-matrix

A tool that allows you to document and assess any security automation in your SOC

brayden031 /varalyze

Cyber threat intelligence tool suite.

UncleSocks /Meeps

Meeps Security is a gamified cybersecurity training and awareness framework. In the game, players handle incoming calls about cybersecurity incidents, analyze them, and submit the correct threat response within the defined SLA. At the end of the shift, players must correctly resolve at least 80% of the tickets to pass their assessments.

ManuelBerrueta /urlyzer

urlyzer is a URL parsing analysis tool.

x746b /winforensics-mcp

A comprehensive MCP server for Windows digital forensics on KALI Linux

fsfang /DFIR-Toolkit

This is a repo for cybersecurity analyst collecting artifacts in a incident response case.

frack113 /MalwareTracesGenerator

Generate malware traces for detection tests

MrM8BRH /Defensive-Security-Hub

A curated collection of essential resources, tools, and references for Security Operations Center (SOC) analysts.

wakeful /veil

Verified Entity Identity Lock (Expose hidden trust paths in your AWS IAM setup before they become security risks.)