BlueTeam.Lab
This project contains a set of Terraform and Ansible scripts to create an orchestrated BlueTeam Lab. The goal is to provide red and blue teams with the ability to deploy an ad-hoc detection lab to test various attacks and forensic artifacts on the latest Windows environment and then to get a 'SOC-like' view into generated data. NOTE: This lab is deliberately designed to be insecure. Please do not connect this system to any network you care about. Lab Layout Prerequisites: A number of features need to be installed on your system in order to use this setup. Step 1 - Install Azure CLI. More details on https://docs.microsoft.com/en-us/cli/azure/install-azure-cli-linux?pivots=apt curl -sL https://aka.ms/InstallAzureCLIDeb | sudo bash. Step 2 - Install Terraform. More details on https://learn.hashicorp.com/tutorials/terraform/install-cli sudo apt-get update && sudo apt-get install -y gnupg software-properties-common curl curl -fsSL https://apt.releases.hashicorp.com/gpg | sudo apt-key add - sudo apt-add-repository 'deb [arch=amd64] https://apt.releases.hashicorp.com $(lsb_release -cs) main' sudo apt-get update && sudo apt-get install terraform
FEATURES
SIMILAR TOOLS
A library for validating and accessing environment variables in Node.js programs
Directory containing components to build labs for Chapter 29 with setup instructions and VM information.
An open-source artifact metadata API for managing metadata about software resources and governing the software supply chain.
A collection of writeups of CTF challenges I solved, including explanations of the challenges and how I solved them.
A tool for scraping CTF writeups from ctftime.org and organizing them for easy access.
A tool for SSH server auditing with comprehensive analysis capabilities.
Certificate Transparency Monitor that alerts you when an SSL/TLS certificate is issued for your domains.
PINNED
Proton Pass is a cross-platform password manager that provides encrypted storage, password generation, and security monitoring features with integrated 2FA and dark web monitoring capabilities.
NordVPN is a commercial VPN service that encrypts internet connections and hides IP addresses through a global network of servers, featuring integrated threat protection and multi-device support.
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.