Классный инструмент визуализации для SOC'a
BloodSOCer is a 💻 Python automation tool that aggregates threat intelligence data from multiple sources (Mitre ATT&CK, Sigma rules, Atomic Red Team) and produces JSON files to ingest in BloodHound in OpenGraph format. Tool can also upload the files to BloodHound and set the icons for the custom objects if it has API Tokens defined in the configuration. Security analysts can then visualize the data from any angle, and a few Cypher queries are provided to help you get started
💻 Repo
#soc #bloodhound #ti
✈️ Whitehat Lab 💬Chat