Virtual Machine for Adversary Emulation and Threat Hunting
RedHunt aims to be a one stop shop for all your threat emulation and threat hunting needs by integrating attacker's arsenal as well as defender's toolkit to actively identify the threats in your environment.
Base Machine:
- Lubuntu-17.10.1 x64
Tool Setup
Attack Emulation:
Logging and Monitoring:
Open Source Intelligence (OSINT):
Threat Intelligence:
Sneak Peek:
References:
- https://cyberwardog.blogspot.in/2017/02/setting-up-pentesting-i-mean-threat_98.html
- https://jordanpotti.com/2018/02/16/elk-osquery-kolide-fleet-love/
Analysis Distribution Distro Forensics Intelligence Linux Memory Forensics OSINT RedHunt OS Testing Threat Intelligence Toolkit