README.md

Blue Team & Threat Hunting Knowledge Base

A living repository of technical cheat sheets, query templates, and investigative methodologies used during security operations.

🧭 Repository Navigation

🌐 Network Security & Analysis

• Wireshark Investigation Cheat Sheet - Packet analysis filters for hunting scanning, C2 beacons, and lateral movement.

💻 Endpoint & Windows Security

• Coming Soon - Windows Event ID mappings for tracking lateral movement and privilege escalation.

☁️ Cloud & SIEM Operations

• KQL Threat Hunting Cheat Sheet - Enterprise-wide log analysis queries for Microsoft Sentinel targeting recon, brute-force verification, and DNS tunneling.