| 2018-07-10 | Categorising and Enriching Security Events in an ELK with Sysmon and ATT&CK | ourren | 2173 | |
| 2018-07-06 | dftimewolf: A framework for orchestrating forensic | ourren | 5995 | |
| 2018-07-02 | AccessLogAnylast: 支持Nginx、Apache、Tomcat等标准WEB日志的分析 | ourren | 2898 | |
| 2018-07-02 | Log-killer: Clear all your logs in [linux/windows] servers | ourren | 2600 | |
| 2018-06-29 | Threat Hunting-威胁狩猎分享 | ourren | 3576 | |
| 2018-06-26 | 浅谈威胁情报从甲方运营到乙方交付 | ourren | 2316 | |
| 2018-06-19 | honeytrap: Advanced Honeypot framework | ourren | 2564 | |
| 2018-06-13 | How to accelerate Suricata, Bro, Snort with PF_RING FT | ourren | 2548 | |
| 2018-06-12 | 从EDR到威胁情报运营—浅谈终端化的情报部署 | ourren | 2832 | |
| 2018-06-06 | Tracing stolen bitcoin 如何追踪被盗比特币的一些讨论 | ourren | 1777 | |
| 2018-06-06 | ClickHouse与威胁日志分析 | ourren | 2712 | |
| 2018-06-05 | 使用 Rekall 和 WinPmem 进行内存取证 | ourren | 3060 | |
| 2018-06-05 | backdoorme: powerful auto-backdooring utility | ourren | 5162 | |
