Snorby
An excellent instruction on how to get Snorby and a lot of his neat tool up and running can be found here.
Astaro/Sophos UTM as snorby sensor
Add your snorby server as destination for the "Intrusion Prevention Log" at the UTM.
Fight against Phase 1 Fight against Phase 2 Fight against Phase 3 Fight against Phase 4 IOC sharing Find random generatet URL's APT Simulator to test your capabilities CyCON 2019 Secure your Microsoft software Password's Cyber Threat Intelligence
Attack Prerequesits Install Testing your CIF server Adding more sources Sources Snorby MISP vFeed TheHive Kali & torscraper (monitoing the DarkWeb) OpenCTI mhn - Modern Honey Network
OSINT Information gathering Malware analysis Equation MISP Forensic Splunk Incident response