RedHunt Linux - Adversary Emulation, Threat Hunting & Intelligence

Sylabicuma

For you guys that seek a "blue team" lab, this looks like it could be a valuable asset. A VM specifically for Adversary Emulation, Threat Hunting and Intelligence.

https://isc.sans.edu/forums/diary/RedHunt+Linux+Adversary+Emulation+Threat+Hunting+Intelligence/24216/

From the article:

"Based on Lubuntu-18.04 x64, the RedHunt Linux virtual machine for adversary emulation and threat hunting is a “one stop shop for all your threat emulation and threat hunting needs. It integrates an attacker’s arsenal as well as defender’s toolkit to actively identify the threats in your environment.”

This distribution includes tools for attack emulation, logging and monitoring, open source intelligence (OSINT) gathering and threat intelligence. As such, I’m going focus on one each from attack emulation, OSINT, and threat intelligence. The virtual machine username and password are hunter. The menu is simple and laid out categorically, you’ll have no trouble navigating accordingly"

MrsWilliams

Very Cool