dsh-blue-team

蓝队防御插件：资产发现/漏洞评估/威胁检测/日志取证/加固基线（8 工具，ATT&CK 能力地图）

AI Analysis

核心用途是蓝队网络安全防御与取证。适合安全运维人员进行本机或目标主机的漏洞扫描、进程审计和合规基线检查任务。

Package: dsh-blue-team
Version: 0.1.1
Last updated: Sep 7, 2026

Install

This plugin has no verified bundle, or compatibility checks failed. Read the repository notes first. Read the full README ↗

README

Read the full README ↗

使用示例

blue_port_scan                            # 本机常见端口扫描
blue_port_scan host="192.168.1.10" ports="1-1000"
blue_cve_lookup keyword="nginx"
blue_process_audit                        # 找可疑监听/外联
blue_autoruns_check                       # 找持久化机制
blue_event_log_query eventIds="4625,4720" days="7"
blue_baseline_check                       # 加固基线
blue_ioc_query value="evil.com"
blue_hash_lookup path="C:\temp\sample.exe"