awesome-soc-analyst
github.com/st0pp3r/awesome-soc-analyst ↗Online resources related to SOC Analysts. Incident investigation reference material, blogs, newsletters, good reads, books, trainings, podcasts, Twitter/X accounts and a set of tools relevant to the role of SOC analyst.
Use this list with your AI agent
Add the Context Awesome MCP server to Claude, Cursor, or any MCP client, then ask:
"Show me tools resources from awesome-soc-analyst"
Installation instructions →What's inside
Tools
- 10 minute mail
Can be used for registrations.
- AbuseIPDB | IP, Subnet, Domain
- AlienVault | IP, Domain, URL, Hash, FilePath, Email
- AnyRun
Interactive malware analysis sandbox.
- A-Packets PCAP Analyzer
PCAP analyzer from A-Packets.
- ASN LookUp
Event Log References
Attack Reference Material
- ADSecurity AD Attacks
Attacks on Active Directory.
- AS_REP Roasting | hackndo
Explanation of as_rep roasting attack.
- DCSync | adsecurity
Explanation of DCSync attack.
- DNS DGA | cybereason
Nice examples of DGA variants.
- DNS Tunneling | unit42
Simple example of DNS tunneling and how it is abused.
- Kerberoasting | adsecurity
Explanation of kerberoasting attack.
Blogs
- Bad Sector Labs
Good catch all aggregator.
- Bleeping Computer
Cyber security news.
- Dark Reading
Cyber security news.
- Elastic Security Labs
Good collection of malware analysis blogposts.
- SOC Investigation
SOC related articles.
Books
Training and Certifications
- Blue Team Labs Online
A gamified platform for defenders to practice their skills in security investigations and challenges covering; Incident Response, Digital Forensics, Security Operations, Reverse Engineering, and Threat Hunting.
- CompTIA CySA+
- CompTIA Security+
- Constructing Defense
- CyberDefenders CCD
- EC-Council Certified Incident Handler
Showing a sample of 239 resources. View the full list on GitHub →