| 2018-07-11 | 一种工控系统主动防御技术 | ourren | 2805 | |
| 2018-07-11 | 一款用于可视化分析恶意登录Windows系统的安全日志取证工具 | ourren | 3458 | |
| 2018-07-10 | Categorising and Enriching Security Events in an ELK with Sysmon and ATT&CK | ourren | 2244 | |
| 2018-07-06 | dftimewolf: A framework for orchestrating forensic | ourren | 6827 | |
| 2018-07-02 | AccessLogAnylast: 支持Nginx、Apache、Tomcat等标准WEB日志的分析 | ourren | 2998 | |
| 2018-07-02 | Log-killer: Clear all your logs in [linux/windows] servers | ourren | 2679 | |
| 2018-06-29 | Threat Hunting-威胁狩猎分享 | ourren | 3639 | |
| 2018-06-26 | 浅谈威胁情报从甲方运营到乙方交付 | ourren | 2370 | |
| 2018-06-19 | honeytrap: Advanced Honeypot framework | ourren | 2751 | |
| 2018-06-13 | How to accelerate Suricata, Bro, Snort with PF_RING FT | ourren | 2555 | |
| 2018-06-12 | 从EDR到威胁情报运营—浅谈终端化的情报部署 | ourren | 2890 | |
| 2018-06-06 | Tracing stolen bitcoin 如何追踪被盗比特币的一些讨论 | ourren | 1788 | |
| 2018-06-06 | ClickHouse与威胁日志分析 | ourren | 2771 | |
