bfuzzy

auditd-attack. A Linux Auditd rule set mapped to MITRE's Attack Framework

ThreatHunter-Playbook. A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns.

FuzzySysmon. My sysmon config I use for testing purposes

Windows_Baselines. Windows Baselines

Windows-Hunting.

threat_hunting_tables. Theat hunting notes in flat file format and mapped to MITRE's ATT&CK IDs