Blue Team Toolkit

                                    Blue Team Toolkit

Network Analysis: 

• Wireshark
• pfSense 
• Arkime
• Snort

OS Analysis:

• HELK
• Volatility
• Wazuh
• RegRipper
• OSSEC
• osquery

Incident Management:

• TheHive
• GRR Rapid Response

Threat Intelligence:

• Misp
• MSTICPy

EDR:

• Cortex XDR
• Cynet 360
• FortiEDR

Honeypots:

• Kippo
• Cowrie
• Dockpot
• Hon SSH

SIEM:

• OSSIM
• Splunk
• LogRhytm