Blumira / Kerberoast-Detection
Kerberoast Detection Script
☆30Updated 5 months ago
Alternatives and similar repositories for Kerberoast-Detection:
Users that are interested in Kerberoast-Detection are comparing it to the libraries listed below
- This repository aims to collect and document indicators from the different C2's listed in the C2-Matrix☆72Updated 3 years ago
- Bloodhound Portable for Windows☆51Updated 2 years ago
- PowerHunt is a modular threat hunting framework written in PowerShell that leverages PowerShell Remoting for data collection on scale.☆68Updated 4 months ago
- PowerShell script that aim to help uncovering (eventual) persistence mechanisms deployed by a threat actor following an Active Directory …☆93Updated last year
- Cloud, CDN, and marketing services leveraged by cybercriminals and APT groups☆59Updated 2 years ago
- ☆46Updated last month
- BloodHound Data Scanner☆45Updated 4 years ago
- ☆68Updated last year
- blame Huy☆42Updated 4 years ago
- ☆23Updated 3 years ago
- Providing Azure pipelines to create an infrastructure and run Atomic tests.☆51Updated last year
- Silver SAML forgery tool☆49Updated last year
- ShellSweeping the evil.☆52Updated 9 months ago
- Enumerate Microsoft 365 Groups in a tenant with their metadata☆52Updated 4 years ago
- Living off the False Positive!☆35Updated 2 months ago
- ☆41Updated last year
- ☆41Updated 3 years ago
- ☆27Updated 3 years ago
- SMBMap is a handy SMB enumeration tool - here with Kerberos support☆73Updated 3 years ago
- Threat Mitigation Strategies☆25Updated last year
- Parses Nessus .nessus files for exploitable vulnerabilities and outputs a report file in format MM-DD-YYYY-nessus.csv☆39Updated last year
- Using Microsoft 365 App Passwords for persistence☆23Updated 4 years ago
- ☆18Updated 2 years ago
- ☆33Updated last year
- Useful access control entries (ACE) on system access control list (SACL) of securable objects to find potential adversarial activity☆90Updated 3 years ago
- Community Tasks/Plans for PlumHound Queueing☆23Updated 2 years ago
- Simple PowerShell script to enable process scanning with Yara.☆93Updated 2 years ago
- Placeholder for my detection repo and misc detection engineering content☆43Updated last year
- Send High & New Incidents to The Hive incident management Platform☆18Updated 4 years ago
- A collection of searches, interesting events and tables on Crowdstrike Splunk.☆29Updated 4 years ago