The Blue Team Toolkit is a field reference for defensive security work: incident response, log analysis, phishing analysis, network analysis, endpoint forensics, malware triage, and hardening. It is maintained by @EvolvingSysadmin.
Read it at blueteam.ryanheavican.com or browse the Markdown in docs/.
pip install -r requirements.txt
mkdocs serve
Then open http://127.0.0.1:8000.
