DISCLAIMER: This repo was made before I started coding and just wanted a place to keep files.

These are some of the files that I reference when triaging a SOC alert or conducting OSINT.

• Sans files
• StationX files
• various OSINT files

I also have some 'clean' files here for configuration reference.

• etc files

Ticket templates

• Ticket tempaltes for Jira:
  • CrowdStrike
  • ProofPoint
  • QRadar
  • Splunk
  • SentinelOne

Contributing

This repo was just a place to have some of my DFIR files handy and shareable...

License

This repository is licensed under the MIT License. See the LICENSE file for more details.

Contact

For any questions or suggestions, please contact cainepavl@outlook.com