Windows Event Forwarding/Collection - A simple way to get quick, comprehensive logging for a Windows environment.
☆16Jun 5, 2022Updated 4 years ago
Alternatives and similar repositories for WEFC
Users that are interested in WEFC are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Steezy - Ghetto Yara Generation☆15Mar 27, 2023Updated 3 years ago
- Python libreNMS API☆13Aug 2, 2022Updated 4 years ago
- Disabling PowerShell v2 with Group Policy☆15Mar 11, 2022Updated 4 years ago
- ☆19Oct 28, 2018Updated 7 years ago
- Linux Auditing System logs pretty printer☆11Dec 22, 2019Updated 6 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Track previous changes on specific AD accounts (users, computers) and Groups (online DC), even if event logs were wiped/not collected (e.…☆16Feb 25, 2025Updated last year
- Small tools to assist with using Large Language Models☆12Nov 7, 2023Updated 2 years ago
- Universal Winlogbeat configuration☆34Mar 18, 2022Updated 4 years ago
- ☆58Feb 15, 2021Updated 5 years ago
- A small wriiteup and a PoC tool about how to use SO_REUSADDR for firewall evasion☆27Dec 8, 2015Updated 10 years ago
- Tool to read EVTX files including SYSMON and convert to JSON, MISP Objects and Graph stream☆12Oct 29, 2020Updated 5 years ago
- An Inofficial Sysmon Version History (Change Log)☆33Oct 25, 2020Updated 5 years ago
- ☆15Sep 24, 2024Updated last year
- A simple utility to check the status of and/or disable SMBv1 on Windows system via Cb Response's Live Response functionality.☆15May 28, 2019Updated 7 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A List of InfoSec Resources☆10Jun 12, 2014Updated 12 years ago
- Quick script to build host or investigation timelines using Carbon Black Response☆12Sep 25, 2018Updated 7 years ago
- This is the offical Repository for the Access Package Builder Web App.☆21Apr 17, 2026Updated 3 months ago
- Logmira by Blumira has been created by Amanda Berlin as a helpful download of Microsoft Windows Domain Group Policy Object settings.☆64Apr 23, 2026Updated 3 months ago
- A not-at-all-ordered compilation of random security-related powershell scripts :-)☆12Feb 24, 2022Updated 4 years ago
- ☆28Jan 8, 2025Updated last year
- PowerShell scripts to aid investigators when utilizing O365 and Magnet Axiom.☆12Aug 26, 2024Updated last year
- This tool helps #blueteams detect bad actors who may be port scanning the network, and allows #redteams to practice honeypot evasion.☆11Oct 20, 2020Updated 5 years ago
- yaa - yaml search for humans☆12Dec 8, 2025Updated 8 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A simple todo example made with Swift Perfect☆12Nov 4, 2016Updated 9 years ago
- My experiments in weaponizing Nim (https://nim-lang.org/)☆14Nov 30, 2021Updated 4 years ago
- a database that collects data related to APTs from existing public sources through a semi automatic methodology and produces an exhaustiv…☆21Nov 22, 2022Updated 3 years ago
- Labs and course material for Advania course 'PowerShell Advanced Fundamentals'☆12Jan 12, 2026Updated 6 months ago
- A free bookmarklet password generator.☆13May 31, 2014Updated 12 years ago
- Google Script for creating a simple help desk / ticket system using Google Sheets with a linked Google Form☆13Jul 6, 2021Updated 5 years ago
- ☆20May 30, 2025Updated last year
- Yoink is a quick tool for use with Obsidian that will allow you to take a markdown file and package it up into a folder that will allow y…☆18Aug 31, 2023Updated 2 years ago
- Various components we use in labs☆10Oct 30, 2020Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆12Mar 4, 2018Updated 8 years ago
- Crowdstrike Falcon Host script for iterating through instances to get alert and other relevant data☆14Jul 16, 2019Updated 7 years ago
- Signing Visual Basic Macros in Office Files☆14Oct 25, 2020Updated 5 years ago
- Windows kernel driver exploitation knowledge base — 28 case studies organized by driver type, grounded in real CVEs with build numbers an…☆20Mar 26, 2026Updated 4 months ago
- ☆18Mar 10, 2026Updated 5 months ago
- The "DFUR" Splunk application and data that was presented at the 2020 SANS DFIR Summit.☆13Sep 9, 2020Updated 5 years ago
- Splunk app for Threat hunting☆15Nov 15, 2018Updated 7 years ago