https://ondemandelearning.cisco.
com/apollo-alpha/mc_salyst110_81/pages/10
Hot Threat Dashboard
Many sources are available for the SOC analyst to learn about various threats. Each
SOC maintains similar threat intelligence lists that are tailored to its individual
preferences, and the lists are modified as sites become more or less relevant or as
new sites are created.
Recommended Security Tool Bookmarks
Malware detection and analysis sites:
https://www.virustotal.com/
http://totalhash.com/
https://www.hybrid-analysis.com/
http://www.herdprotect.com/knowledgebase.aspx
http://www.phishtank.com/
http://md5hashing.net/hash_type_checker
https://threatcrowd.org
https://www.trendmicro.com/en_us/research.html
Web content verification sites:
https://hackvertor.co.uk/public
https://talosintelligence.com
https://urlscan.io/domain/urlquery.net
http://ipvoid.com/
http://pgl.yoyo.org/urlex/
http://www.internetofficer.com/seo-tool/redirect-check/
Network utilities:
https://www.whatismyip.com/ip-address-hostname-lookup/
http://centralops.net/co/
https://www.robtex.com/
https://dnslytics.com/ip
http://dnsviz.net/
http://www.ipaddressguide.com/cidr
Scripting utilities:
http://snarkles.net/scripts/sneak/sneak.php
http://utf-8.jp/public/jjencode.html
http://ddecode.com/phpdecoder/
Blogs and Feeds
The following blogs and feeds are recommended for the security analyst:
http://blogs.cisco.com/security/
https://talosintelligence.com
https://www.cisecurity.org
https://twitter.com/
http://malware-traffic-analysis.net/
http://malware.dontneedcoffee.com/
http://krebsonsecurity.com/
http://blog.dynamoo.com/
http://sanesecurity.blogspot.co.uk/
http://blog.0x3a.com/
http://blog.trendmicro.com/trendlabs-security-intelligence/
https://www.virustotal.com/en/community/
http://blog.didierstevens.com/
http://www.securiteam.com
http://isc.sans.edu
http://www.darknet.org.uk/
http://www.newsnow.co.uk/h/Technology/Security
https://threatcrowd.org
