Documentation

Blumira Configuration

Blumira Getting Started Guide
Create a Blumira Sensor
Blumira Sensor Outbound Allowlist
Reinstalling or Updating a Blumira Sensor
Security Findings
Role-Based Administration
Dynamic Blocklists and Threat Feeds
Deploy a Blumira Honeypot
Build a Sensor on Ubuntu

Cloud Services

KnowBe4 – PhishER
Infoblox
Microsoft Defender for Endpoint
Microsoft Defender for Office 365
Azure AD
Okta
Cisco Umbrella
Google G Suite
Duo Security
Microsoft Office 365
Microsoft Cloud App Security
Microsoft Azure Event Hub

AWS

AWS: Getting Started Guide
AWS: Kinesis Data Stream and IAM
AWS: CloudTrail
AWS: CloudWatch
AWS: VPC Flow Logs
AWS: GuardDuty

Endpoint

Malwarebytes Nebula
Symantec Endpoint Security
Trend Micro Apex One
Microsoft Defender for Endpoint
Microsoft Windows Defender
Blackberry Cylance
Sophos Central
ESET Endpoint Protection
Malwarebytes
VMware Carbon Black Managed Defense
VMware Carbon Black Endpoint Protection
VMware Carbon Black Response
CrowdStrike Falcon Endpoint Protection

Microsoft Server

Advanced Microsoft Logging (GPO Template)
Microsoft Windows Defender
Microsoft Windows Firewall
Microsoft Windows DNS
Microsoft Windows PowerShell
Microsoft Windows IIS
Microsoft Active Directory
Microsoft Windows Server

Microsoft Cloud

Microsoft Security Modules
Microsoft Defender for Endpoint
Microsoft Defender for Office 365
Azure AD
Microsoft Office 365
Microsoft Cloud App Security
Microsoft Azure Event Hub

Identity

LastPass
Okta
Microsoft Active Directory
Duo Security

Firewall

Citrix Netscaler ADC
WatchGuard Firebox Firewall
F5 Big-IP
Palo Alto Next-Gen Firewall
Fortinet Fortigate Firewall
Cisco Meraki Firewall
SonicWall Next-Gen Firewall
Sophos XG Firewall
Cisco FTD FirePower Threat Defense
Cisco ASA Firewall
Check Point Next-Gen Firewall

Other

Forescout
WinLogBeat Forwarding
Apache Web Server
Linux Auditd File Integrity Monitoring
Linux Journald
Nginx Web Server
VMware ESXi
Cisco Umbrella
Sophos Central
Apple Mac OS
Linux Servers
Proofpoint Advanced Threat Protection
Palo Alto Networks Panorama

Security Guides

How to Image Machines for Forensic Use
How to Disable Null Session in Windows
How to Disable LLMNR, Netbios, WPAD, & LM Hash
How to Configure SMB Signing

Detection Tests

Office365 Inbox Rule Creation
Deletion of Windows Event Log Detection Test
PowerShell Execution Policy Bypass
How To Test a Honeypot
Domain Administrator Account Creation
Password Spraying

Threat Feeds

Threat Feed: Abuse.ch SSL Blocklist
Threat Feed: Abuse.ch Feodo Tracker
Blumira Feeds: An Overview