NOTE: For Admin/SOC usage.

This will continue from

The goal of this project is to get an understanding of how A Security Operations Center operates with its procedures and how they would build "Playbooks" with the intent of using during said events.

I will make a environment made for detecting/practicing blue team tactics.

Installation Links: these are Open Source except for one.

OSSEC: https://www.ossec.net/ossec-downloads/

SNORT: https://www.snort.org/downloads

SPLUNK: https://www.splunk.com/en_us/download/splunk-cloud.html (This is not Open Source and only has 14 day trial.)

OSSIM: (manual build) https://github.com/ossimlabs/ossim OR (ISO build) https://cybersecurity.att.com/products/ossim

Under Construction