> For the complete documentation index, see [llms.txt](https://notes.nomanaziz.me/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://notes.nomanaziz.me/cybersecurity/blue-teaming.md).

# Blue Teaming

- [Digital Forensics & Incidence Response](https://notes.nomanaziz.me/cybersecurity/blue-teaming/digital-forensics-and-incidence-response.md)
- [Memory Acquisition with LIME](https://notes.nomanaziz.me/cybersecurity/blue-teaming/digital-forensics-and-incidence-response/memory-acquisition-with-lime.md)
- [Disk Analysis with Autopsy](https://notes.nomanaziz.me/cybersecurity/blue-teaming/digital-forensics-and-incidence-response/disk-analysis-with-autopsy.md)
- [Data and Memory Collection with FireEye Redline](https://notes.nomanaziz.me/cybersecurity/blue-teaming/digital-forensics-and-incidence-response/data-and-memory-collection-with-fireeye-redline.md)
- [Memory Forensice with Volatility](https://notes.nomanaziz.me/cybersecurity/blue-teaming/digital-forensics-and-incidence-response/memory-forensice-with-volatility.md)
- [Intrusion Detection](https://notes.nomanaziz.me/cybersecurity/blue-teaming/intrusion-detection.md)
- [Intrusion Detection Systems (IDS)](https://notes.nomanaziz.me/cybersecurity/blue-teaming/intrusion-detection/intrusion-detection-systems-ids.md)
- [Threat Monitoring with Security Information & Event Management (SIEM)](https://notes.nomanaziz.me/cybersecurity/blue-teaming/intrusion-detection/threat-monitoring-with-security-information-and-event-management-siem.md)
- [Security Event Monitoring](https://notes.nomanaziz.me/cybersecurity/blue-teaming/intrusion-detection/security-event-monitoring.md)
- [Host Based Intrusion Detection System (HIDS) - OSSEC](https://notes.nomanaziz.me/cybersecurity/blue-teaming/intrusion-detection/host-based-intrusion-detection-system-hids-ossec.md)
- [Miscellaneous](https://notes.nomanaziz.me/cybersecurity/blue-teaming/miscellaneous.md)
- [Docker Image Security Analysis with Trivy](https://notes.nomanaziz.me/cybersecurity/blue-teaming/miscellaneous/docker-image-security-analysis-with-trivy.md): This process allows us to detect vulnerabiites in docker images before deploying or running them.