search

OTRF / Security-Datasets

Re-play Security Events
MIT License
1.61k stars 239 forks source link

Using Mordor #28

Closed veeral-patel closed 4 years ago

veeral-patel commented 4 years ago

Hey - thanks for this great project! I have to say, I don't fully understand it...I see it provides JSON log files that were created after running attacks, but how should I use this information as an defender? I read the README and the introductory blog post but I still don't understand.

Cyb3rWard0g commented 4 years ago

Hey @veeral-patel ! This is a great example. Every single playbook/notebook leverages datasets from mordor to perform research and validate analytics developed https://threathunterplaybook.com/notebooks/windows/windows.html