BlueCloud - Cyber Range including Velociraptor + HELK system with a Windows VM for security testing and R&D

Cyber Range deployment of HELK and Velociraptor! Automated terraform deployment of one system running HELK + Velociraptor server with one registered Windows endpoint in Azure or AWS. A collection of Terraform and Ansible scripts that automatically (and quickly) deploys a small HELK + Velociraptor R&D lab.

Use Cases

EDR Testing lab
Penetration Testing lab
SIEM / Threat Hunting / DFIR / Live Response lab with HELK + Velociraptor [1, 2]
Data Science research with HELK server, Jupyter notebooks
Detection Engineering research with Mordor [3, 4]

Documentation

Please see the full documentation for details and getting started with installation.

Full Documentation Site

Download BlueCloud

If you like the site, please consider joining the telegram channel or supporting us on Patreon using the button below.

Original Source

Tags: hacking, OSINT, Security, threatintel, tools

BlueCloud – Cyber Range including Velociraptor + HELK system with a Windows VM for security testing and R&D

Original Source

[AKIRA] – Ransomware Victim: Billet Precision (billetprecision[.]ca)

[CACTUS] – Ransomware Victim: ptcky[.]com

Cobalt Strike Beacon Detected – 112[.]124[.]71[.]123:443

Cobalt Strike Beacon Detected – 54[.]238[.]39[.]64:443

Cobalt Strike Beacon Detected – 103[.]30[.]40[.]70:80

Original Source

You may have missed

[AKIRA] – Ransomware Victim: Billet Precision (billetprecision[.]ca)

[CACTUS] – Ransomware Victim: ptcky[.]com

Cobalt Strike Beacon Detected – 112[.]124[.]71[.]123:443

Cobalt Strike Beacon Detected – 54[.]238[.]39[.]64:443

Cobalt Strike Beacon Detected – 103[.]30[.]40[.]70:80