Alternatives and similar repositories for Kerberoast-Detection:

Users that are interested in Kerberoast-Detection are comparing it to the libraries listed below

• NetSPI / PowerHunt
  PowerHunt is a modular threat hunting framework written in PowerShell that leverages PowerShell Remoting for data collection on scale.
  ☆65Updated 2 months ago
• improsec / 2Cloudz
  ☆22Updated 2 years ago
• Qazeer / FarsightAD
  PowerShell script that aim to help uncovering (eventual) persistence mechanisms deployed by a threat actor following an Active Directory …
  ☆93Updated last year
• nasbench / C2-Matrix-Indicators
  This repository aims to collect and document indicators from the different C2's listed in the C2-Matrix
  ☆72Updated 3 years ago
• SadProcessor / WatchDog
  BloodHound Data Scanner
  ☆44Updated 4 years ago
• DefensiveOrigins / DO-LAB
  ☆46Updated 2 weeks ago
• PlumHound / PlumHound-Tasks
  Community Tasks/Plans for PlumHound Queueing
  ☆23Updated 2 years ago
• SadProcessor / HandsOnBloodHound
  Material for the "Hands-On BloodHound" Workshop
  ☆107Updated 3 years ago
• Semperis / SilverSamlForger
  Silver SAML forgery tool
  ☆49Updated 11 months ago
• freeload101 / Bloodhound-Portable
  Bloodhound Portable for Windows
  ☆51Updated last year
• secureworks / whiskeysamlandfriends
  GoldenSAML Attack Libraries and Framework
  ☆67Updated 8 months ago
• cybergoatpsyops / detections
  Placeholder for my detection repo and misc detection engineering content
  ☆43Updated last year
• cnotin / m365_groups_enum
  Enumerate Microsoft 365 Groups in a tenant with their metadata
  ☆52Updated 3 years ago
• MHaggis / ShellSweep
  ShellSweeping the evil.
  ☆52Updated 7 months ago
• OTRF / Set-AuditRule
  Useful access control entries (ACE) on system access control list (SACL) of securable objects to find potential adversarial activity
  ☆90Updated 3 years ago
• Cyb3rWard0g / log4jshell-lab
  ☆68Updated last year
• secgroundzero / KQL_Reference_Manual
  ☆40Updated 3 years ago
• PwnDefend / Active_Directory_ADSI_Audit_Powershell
  blame Huy
  ☆42Updated 4 years ago
• secureworks / TokenMan
  ☆100Updated 2 years ago
• NVISOsecurity / nviso-cti
  ☆41Updated 10 months ago
• chihebchebbi / Azure-Sentinel-Hive-Playbook
  Send High & New Incidents to The Hive incident management Platform
  ☆18Updated 4 years ago
• NetSPI / FuncoPop
  Tools for attacking Azure Function Apps
  ☆68Updated 3 months ago
• RemiEscourrou / Invoke-Leghorn
  Leghorn code for PKI abuse
  ☆32Updated 3 years ago
• threatexpress / threat-mitigation
  Threat Mitigation Strategies
  ☆25Updated last year
• brokensound77 / LoFP
  Living off the False Positive!
  ☆33Updated 2 weeks ago
• sleeptok3n / RoleCrawl
  ☆20Updated last year
• DarwinSec / DEFCON-KQL-KUNG-FU-22
  ☆18Updated 2 years ago
• BinaryDefense / beacon-fronting
  A simple command line program to help defender test their detections for network beacon patterns and domain fronting
  ☆69Updated 3 years ago
• jangeisbauer / gundog
  gundog - guided hunting in Microsoft Defender
  ☆52Updated 3 years ago
• BushidoUK / Abused-Legitimate-Services
  Cloud, CDN, and marketing services leveraged by cybercriminals and APT groups
  ☆59Updated 2 years ago