最大化Soc的潜力 Maximize the potential of Soc

POSIX™-compliant, zero-dependency shell script to print in NUS SoC

TriageX - Linux Triage Tool Is a BASH shell script designed to collect evidences in an incident with Linux machines. The script uses native Linux commands to run.

Secure Wazuh deployment automation for Docker with enhanced password management, certificate generation, and security hardening. Scripts for full setup and credential management that eliminate default passwords and implement security best practices.

A comprehensive SOC Analyst project that includes detection rules, attack simulations, automated responses, and SIEM configuration.

Building one Solution for Threat management and detection for you network with Open source SOC solution.

A Security Operations Center (SOC) created by open source tools

SOCIMP: design, build, implement and become a SOC Analyst in a foundational Security Operation Center enviroment.

A containerized SSH Honeypot (Cowrie) lab featuring a custom-engineered Python/Streamlit SIEM. Designed to simulate and analyze internal network breaches over ZeroTier with lightweight real-time forensics.

Sistema de enriquecimiento de alertas en Wazuh

An Open-source Ready SOC in a dockerized environment

Scalable Wazuh agents using FreeBSD Bastille jails

Implemented a SIEM solution using the Elastic Stack (ELK) in a simulated environment to collect, process, and visualize cybersecurity events. The system monitored logs from Windows, Linux, and security devices such as Suricata and pfSense to effectively detect, investigate, and respond to threats.

Claude Code plugin — 18 cybersecurity domains: IR, DFIR, DevSecOps, SOC, Code Security, Container, Compliance, Cloud/CSPM, Zero Trust, AI/ML, API, Vulnerability Mgmt, Threat Intel, OT/ICS, Governance. Bilingual Thai+English.

Pratical SOC built from zero Wazuh SIEM e ModSecurity WAF.

Sistema de monitoreo y alertamiento de vulnerabilidades publicadas en la NVD

Underground Nexus - Linux Webtop Ubuntu XFCE - Dockerhub - https://hub.docker.com/r/phoenixvlabs/nexus-webtop-soc

A complete hands-on lab for learning SQL injection exploitation and detection using modern security tools. This repository accompanies a three-part article series that takes you from basic PHP exploitation to enterprise-grade detection with Sigma rules on Kubernetes.

lightweight SSH brute-force detection and automatic IP blocking script for Linux systems.