스플렁크

ELK

Uncoder CTI : IOC 검색 쿼리 생성기

CyberCherf : 난독화 분석 도구 https://gchq.github.io/CyberChef/

SIEMonster : https://siemonster.com

sysmon

JOE Sandbox

Use case

1. RDP Activities

Untitled

Untitled

Untitled

Untitled

Untitled

Untitled