Awesome list of keywords and artifacts for Threat Hunting sessions

Purpleteam scripts simulation & Detection - trigger events for SOC detections

Capture all events across all logs produced during the running of a particular exploit/script. Search and filter events

Hayabusa to the SIEM made easy

Applied SOC Analysis and Incident Response documentation covering endpoint forensics, network traffic analysis (PCAP), and detection engineering. Demonstrating analyst-level investigative methodology using Splunk, Wireshark, and Sysinternals.

LLMNR/NBT-NS Detection