برای علاقمندان به حوزه شکار تهدیدات

ThreatPursuit VM: A Threat Intelligence and Hunting Virtual Machine

ThreatPursuit Virtual Machine (VM) is a fully customizable, open-sourced Windows-based distribution focused on threat intelligence analysis and hunting designed for intel and malware analysts as well as threat hunters to get up and running quickly. The threat intelligence analyst role is a subset and specialized member of the blue team. Individuals in this role generally have a strong impetus for knowing the threat environment. Often their traits, skills and experiences will vary depending on training and subject matter expertise.
Here are some of the tools, but there are many more:
MISP
OpenCTI
Elasticsearch, Kibana, Logstash
Splunk
Threat Hunter Playbook
CSIRO Data61 Constellation
Maltego
RStudio
MITRE CALDERA
Jupyter Notebook
Python
SilkETW

لینک دانلود ماشین مجازی
https://github.com/fireeye/ThreatPursuit-VM