phishing-analysis

Field reference for BTL1 and Tier 1 SOC work — grep-ready cheatsheets, SPL queries, Volatility workflows, live response commands

Free self-hosted OSINT investigator's toolkit with an MCP server for Claude Code and Claude Desktop. 19 tools in one interface: crypto tracing, phishing fingerprinting and hunting, attack surface, route map, domain intel, Telegram OSINT, IP reputation, email header forensics, username enumeration, HIBP breach checks, ransomware tracking. AGPL-3.0.

Hands-on SOC analyst portfolio featuring Splunk-based alert triage, phishing investigations, log correlation, MITRE ATT&CK mapping, and incident-response documentation.

Free hands-on SOC home lab: AWS mini-SOC (CloudTrail, GuardDuty, Terraform), CloudTrail IOC analyzer with in-browser demo, phishing analysis, ELF triage, CISA KEV threat-hunting labs. Synthetic data, MIT.

Email Header Forensics Lab is a desktop application for inspecting, generating, editing, and analyzing email headers in controlled environments for forensic analysis, security research, and authentication testing.

Curated Blue Team toolkit for defensive cybersecurity: asset discovery, vulnerability management, network monitoring, DFIR, threat intelligence, cryptography, endpoint security and SIEM/log management.

Complete notes, challenge walkthroughs, and 20+ alert investigations for the LetsDefend.io SOC Analyst path. This covers SIEM, phishing analysis, web attack detection, malware triage, threat intelligence and Splunk.

SOC-focused security projects: Sentinel detections for identity (AD, Okta, Entra ID) and malware behavior, a custom Windows EDR, incident response and malware analysis.

Phishing awareness analysis toolkit that detects suspicious email red flags, analyzes phishing indicators, and generates Safe / Suspicious / Malicious verdicts.

Forensic analysis of a targeted phishing campaign, email header tracing, URL sandboxing, and IOC extraction.

Phishing email investigation with full header analysis, link inspection, red-flag detection.

Hands-on cybersecurity labs for SOC monitoring, SIEM detection, Windows log analysis, vulnerability assessment, Python automation, and GRC documentation.

Phishing email analysis, header forensics, and IoC extraction for SOC Incident Response workflows.

SOC L1 Investigation Reports

Comprehensive phishing incident response simulation with email forensics, threat intelligence enrichment, and NIST-aligned playbook

Advanced phishing detection web application that analyzes suspicious emails using 20+ phishing red-flag rules, risk scoring, sample attack simulations, and optional AI-powered threat analysis.

A Python tool to parse .eml email headers, extract embedded URLs, and evaluate phishing threat indicators.

Hands on analysis and defending against phishing emails. Investigating real-world phishing attempts using a variety of techniques.

Phishing email triage and indicator extraction: header consistency, brand impersonation, delivery path, attachment hashing and defanged IOCs, as Markdown or JSON.