├── Chapter 3 └── Lab build │ ├── esk │ ├── .env │ └── docker-compose.yaml │ └── fleet │ ├── .env │ └── docker-compose.yaml ├── Chapter 4 └── docker-compose.yaml ├── Chapter 7 └── sysmon_config.xml ├── Chapter 8 └── Possible-MOTW-bypass-ISO.yaml ├── LICENSE ├── README.md └── lab ├── esk ├── .env └── docker-compose.yml ├── fleet ├── .env └── docker-compose.yml └── readme.md /Chapter 3/Lab build/esk/.env: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Practical-Threat-Detection-Engineering/HEAD/Chapter 3/Lab build/esk/.env -------------------------------------------------------------------------------- /Chapter 3/Lab build/esk/docker-compose.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Practical-Threat-Detection-Engineering/HEAD/Chapter 3/Lab build/esk/docker-compose.yaml -------------------------------------------------------------------------------- /Chapter 3/Lab build/fleet/.env: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Practical-Threat-Detection-Engineering/HEAD/Chapter 3/Lab build/fleet/.env -------------------------------------------------------------------------------- /Chapter 3/Lab build/fleet/docker-compose.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Practical-Threat-Detection-Engineering/HEAD/Chapter 3/Lab build/fleet/docker-compose.yaml -------------------------------------------------------------------------------- /Chapter 4/docker-compose.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Practical-Threat-Detection-Engineering/HEAD/Chapter 4/docker-compose.yaml -------------------------------------------------------------------------------- /Chapter 7/sysmon_config.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Practical-Threat-Detection-Engineering/HEAD/Chapter 7/sysmon_config.xml -------------------------------------------------------------------------------- /Chapter 8/Possible-MOTW-bypass-ISO.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Practical-Threat-Detection-Engineering/HEAD/Chapter 8/Possible-MOTW-bypass-ISO.yaml -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Practical-Threat-Detection-Engineering/HEAD/LICENSE -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Practical-Threat-Detection-Engineering/HEAD/README.md -------------------------------------------------------------------------------- /lab/esk/.env: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Practical-Threat-Detection-Engineering/HEAD/lab/esk/.env -------------------------------------------------------------------------------- /lab/esk/docker-compose.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Practical-Threat-Detection-Engineering/HEAD/lab/esk/docker-compose.yml -------------------------------------------------------------------------------- /lab/fleet/.env: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Practical-Threat-Detection-Engineering/HEAD/lab/fleet/.env -------------------------------------------------------------------------------- /lab/fleet/docker-compose.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Practical-Threat-Detection-Engineering/HEAD/lab/fleet/docker-compose.yml -------------------------------------------------------------------------------- /lab/readme.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Practical-Threat-Detection-Engineering/HEAD/lab/readme.md --------------------------------------------------------------------------------