学习资源

Metadata

Author	Tahir
Creation Date	2021/08/04
Modification Date	2021/08/04
Tactics	None
Techniques	None

APT report

APT_REPORT

• https://github.com/blackorbird/APT_REPORT

APT_CyberCriminal_Campagin_Collections

• https://github.com/CyberMonitor/APT_CyberCriminal_Campagin_Collections

aptnotes

• https://github.com/aptnotes

CyberThreatIntel

• https://github.com/StrangerealIntel/CyberThreatIntel

红队资源

• Red Team Notes https://dmcxblue.gitbook.io/red-team-notes/

• Red Teaming Experiments https://ired.team/

• atomic-red-team https://github.com/redcanaryco/atomic-red-team/

• Infosec_Reference https://rmusser.net/docs/RT.html

• HackTricks https://book.hacktricks.xyz/

• Malware and Stuff https://malwareandstuff.com/

• 棱角 https://forum.ywhack.com/bountytips.php?redteam

C2s

The C2 Matrix https://www.thec2matrix.com/

安全公司

• https://cybersecurity.att.com/blogs/labs-research/

• https://blog.avast.com/

• https://www.forcepoint.com/blog

• https://blog.talosintelligence.com/

• https://blog.nviso.eu/

• https://blog.malwarebytes.com/

• https://blog.trendmicro.com/

• https://www.cybereason.com/blog

• https://unit42.paloaltonetworks.com/

• https://www.fortinet.com/blog

• https://www.tarlogic.com/en/cybersecurity-blog/

• https://www.coveware.com/blog

• https://www.sentinelone.com/blog/

• https://securelist.com/

• https://www.apriorit.com/reverse-blog

• https://blog.f-secure.com/

• https://objective-see.com/blog/

• https://www.virusbulletin.com/blog/

• https://research.checkpoint.com/

• https://www.intezer.com/blog/

• https://www.zscaler.com/blogs

• https://www.proofpoint.com/us/blog

• https://www.anomali.com/blog

• https://www.acronis.com/en-us/blog/

• https://yoroi.company/research/

• https://www.gdatasoftware.com/blog/techblog

• https://labs.inquest.net/

• https://www.crowdstrike.com/blog

博客

• SpecterOps https://posts.specterops.io/

• Hacking Articles https://www.hackingarticles.in/

• Penetration Testing Lab https://pentestlab.blog/

• MDSec blog https://www.mdsec.co.uk/blog/

• Active Directory Security https://adsecurity.org/

• Rasta Mouse https://rastamouse.me/

• NetSPI Blog https://blog.netspi.com/

• Didier Stevens https://blog.didierstevens.com/

• 3gstudent https://3gstudent.github.io/

• F-Secure ·https://labs.f-secure.com/blog/

• fireeye https://www.fireeye.com/blog/threat-research.html

• black hills https://www.blackhillsinfosec.com/blog/

• pentestlaboratories https://pentestlaboratories.com/blog/

• Fox-it https://blog.fox-it.com/

• Evi1cg https://evi1cg.me/

• Dirk-jan Mollema https://dirkjanm.io/

• Shenanigans Labs https://shenaniganslabs.io/

• Stealthbits https://stealthbits.com/blog/

• COMPASS SECURITY BLOG https://blog.compass-security.com/

• SpiderLabs Blog https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/

• XPN https://blog.xpnsec.com/

• SecureAuth blog https://www.secureauth.com/blog/

• Something pVVn3|) this way comes. https://exploit.ph/

• batsec https://blog.dylan.codes/

• Shells.Systems https://shells.systems/

安全会议

BlackHat

• https://www.blackhat.com/

DefCon

• https://www.defcon.org/

RSA

• https://www.rsaconference.com/

x33fcon

• https://www.x33fcon.com/#!index.md

DerbyCon

• https://twitter.com/derbycon

Security BSides

• http://www.securitybsides.com/w/page/12194156/FrontPage

ShmooCon

• https://www.shmoocon.org/

CanSecWest

• https://www.secwest.net/

HITBSecConf

• https://conference.hitb.org/

NullCon

• https://nullcon.net/

GrrCON

• https://grrcon.com/

HOPE Conference

• https://hope.net/

公众号

micropest
moonsec
bypass
鸿鹄实验室
腾讯玄武实验室
看雪学院
潇湘信安
重生信息安全
信安之路
安全族
LemonSec
酒仙桥六号部队
HACK学习呀

威胁猎捕

Windows日志

• https://docs.microsoft.com/en-us/windows/security/threat-protection/auditing/security-auditing-overview

ThreatHunter-Playbook

• https://github.com/OTRF/ThreatHunter-Playbook

Detection Rules

• https://github.com/elastic/detection-rules

Sigma

• https://github.com/Neo23x0/sigma

awesome-yara

• https://github.com/InQuest/awesome-yara

Hunting MindMaps

• https://github.com/sbousseaden/Slides