Immersive-Labs-Sec / msrc-apiLinks
A collection of tools to interact with Microsoft Security Response Center API
☆112Updated 2 years ago
Alternatives and similar repositories for msrc-api
Users that are interested in msrc-api are comparing it to the libraries listed below
Sorting:
- PowerShell script that aim to help uncovering (eventual) persistence mechanisms deployed by a threat actor following an Active Directory …☆98Updated last week
- ☆260Updated last year
- Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR☆250Updated 2 months ago
- ☆213Updated last month
- Execute PowerShell code at the antimalware-light protection level.☆142Updated 3 years ago
- My conference presentations☆87Updated 2 months ago
- Simple PowerShell script to enable process scanning with Yara.☆97Updated 3 years ago
- Python DPAPI NG Decryptor for non-Windows Platforms☆65Updated last year
- PS-TrustedDocuments: PowerShell script to handle information on trusted documents for Microsoft Office☆36Updated 2 years ago
- The Github project for The Defender's Guide by Luke Paine and Jonathan Johnson☆159Updated 2 years ago
- Active C&C Detector☆155Updated 2 years ago
- Identify the attack paths in BloodHound breaking your AD tiering☆326Updated 3 years ago
- WTF are these binaries doing?! A list of benign applications that mimic malicious behavior.☆166Updated 9 months ago
- Fraktal's Ransomware Emulator☆101Updated last year
- Default Detections for EDR☆97Updated last year
- ☆250Updated 7 months ago
- A tool to find folders excluded from AV real-time scanning using a time oracle☆234Updated last year
- Cobalt Strike Beacon configuration extractor and parser.☆158Updated 2 months ago
- Pushes Sysmon Configs☆90Updated 4 years ago
- Sysmon EDR POC Build within Powershell to prove ability.☆226Updated 4 years ago
- Leverage AMSI (Antimalware Scan Interface) technology to aid your analysis. This tool saves all buffers (scripts, .NET assemblies, etc) …☆111Updated 4 years ago
- A Powershell module that helps you identify AppLocker weaknesses☆170Updated 5 years ago
- Yara Rules for Modern Malware☆78Updated last year
- Powershell Event Tracing Toolbox☆77Updated 3 years ago
- A C# based tool for analysing malicious OneNote documents☆118Updated 2 years ago
- A collection of Powershell scripts that will help automate the build process for a Marvel domain.☆152Updated last year
- Project for identifying executables that have command-line options that can be obfuscated, possibly bypassing detection rules.☆181Updated 11 months ago
- LOLESXi is a curated compilation of binaries/scripts available in VMware ESXi that are were used to by adversaries in their intrusions. T…☆143Updated last month
- ☆197Updated 3 years ago
- ☆98Updated 5 years ago