SamuelArnold / SANS-SEC505Links
Some of the lab files for the SANS Institute course SEC505: Securing Windows and PowerShell Automation: https://sans.org/sec505
☆12Updated 8 years ago
Alternatives and similar repositories for SANS-SEC505
Users that are interested in SANS-SEC505 are comparing it to the libraries listed below
Sorting:
- ☆50Updated 5 years ago
- Jupyter notebooks for threat hunting☆57Updated 3 months ago
- Collection of PowerShell functinos and scripts a Blue Teamer might use☆84Updated last year
- A guide to using Azure Data Explorer and KQL for DFIR☆107Updated 3 years ago
- A PowerShell incident response script for quick triage☆80Updated 2 years ago
- ☆72Updated 8 months ago
- Automating the baseline logging settings found here: https://nullsec.us/windows-baseline-logging/☆18Updated 5 months ago
- ☆33Updated 2 years ago
- Full of public notes and Utilities☆117Updated 5 months ago
- ☆61Updated 2 years ago
- Invoke-Forensics provides PowerShell commands to simplify working with the forensic tools KAPE and RegRipper.☆114Updated last year
- Get all my software☆163Updated last month
- ☆41Updated 2 years ago
- PowerShell - Endpoint Analysis Solution Your Windows Intranet Needs☆48Updated 7 months ago
- ☆74Updated last year
- 2021 SANS DFIR Summit: Greppin' Logs☆20Updated 3 years ago
- Project based on RegRipper, to extract add'l value/pivot points from TLN events file☆85Updated 5 months ago
- A repo hosting the Markua content for the EZ Tools manuals hosted on Leanpub☆77Updated last year
- ☆45Updated 6 months ago
- The Business Email Compromise Guide sets out to describe 10 steps for performing a Business Email Compromise (BEC) investigation in an Of…☆259Updated 4 years ago
- Consolidation of various resources related to Microsoft Sysmon & sample data/log☆110Updated 3 years ago
- Search Index Database Reporter☆112Updated 8 months ago
- Scripts for rapid Windows endpoint "tactical triage" and investigations with Velociraptor and KAPE☆146Updated last month
- Random notes collected on the intertubes relating to DFIR☆34Updated 2 years ago
- A repo that contains recursive directory listings (using PowerShell) of a vanilla (clean) install of every Windows OS version to compare …☆168Updated 7 months ago
- A dataset containing Office 365 Unified Audit Logs for security research and detection☆52Updated 3 years ago
- Real-time Response scripts and schema☆115Updated last year
- Various PowerShells scripts I've made (or others have made) to automate some of the boring stuff in my everyday DFIR journey!☆46Updated 9 months ago
- ☆35Updated 8 months ago
- ☆26Updated 3 years ago