Links

Incident Response

#

• Awesome Incident Response
• IR Playbooks

Threat Hunting

#

• Hunting Queries & Detection Rules
• Finding Bad - DFIR and Threat Hunting

DFIR - Host Collection

#

• Bert Jan - IR Powershell
• Digital Forensics Artifacts Repository

Threat Intel

#

• CTI Blueprints

Adversary Emulation

#

• BishopFox - Silver

Insider Threat

#

• Microsoft - MS Cloud App Security - The Hunt for Insider Risks