THEVER1TAS / sysmon-configLinks
Sysmon configuration file templates with advanced event tracing and blocking
☆41Updated last week
Alternatives and similar repositories for sysmon-config
Users that are interested in sysmon-config are comparing it to the libraries listed below
Sorting:
- PowerShell module for SentinelOne API☆67Updated 2 years ago
- PowerShell module that intearacts with the VirusTotal service using a VirusTotal API (free)☆60Updated 6 months ago
- Custom ADMX template focused on hardening Windows 10 & Windows 11 systems☆85Updated this week
- ☆49Updated last year
- The Invoke-TrimarcADChecks.ps1 PowerShell script is designed to gather data from a single domain AD forest based on our similar checks pe…☆54Updated 2 years ago
- ☆29Updated 2 months ago
- ☆33Updated 7 months ago
- Little PowerShell module to extract PowerShell scripts that no longer exists on disk but were run and are still in Event Logs.☆41Updated 4 years ago
- Logmira by Blumira has been created by Amanda Berlin as a helpful download of Microsoft Windows Domain Group Policy Object settings.☆60Updated 9 months ago
- PowerShell Module for managing Microsoft Defender Advanced Threat Protection☆71Updated 2 years ago
- The Office 365 Extractor is a tool that allows for complete and reliable extraction of the Unified Audit Log (UAL)☆263Updated 3 years ago
- A WDAC configuration repository with the sole intention of enriching MDE☆29Updated 3 weeks ago
- The "Monash Enterprise Access Model" (MEAM) is a model for tiering Active Directory that builds heavily on the Microsoft Enterprise Acces…☆115Updated 9 months ago
- A PowerShell module for incident response and threat hunting.☆34Updated last year
- Provides various Windows Server Active Directory (AD) security-focused reports.☆97Updated 6 months ago
- ☆72Updated 8 months ago
- FBPro Audit Test Automation Package allows you to create compliance reports for your systems. The resulting HTML-reports provide a transp…☆127Updated 3 weeks ago
- Defender for Endpoint☆27Updated last year
- ☆50Updated 5 years ago
- Repository for Software Certs for easy software blocking across corp environments, for example, using MDE IOC☆45Updated this week
- Tool to extract Sessions, MessageID(s) and find the emails belonging to MessageID(s). This script utilizes the MailItemsAccessed features…☆41Updated 4 years ago
- M365 MDATP Live Response sample scripts☆74Updated 8 months ago
- This module allows the creation of password expiry emails for users, managers, administrators, and security according to defined template…☆154Updated 2 months ago
- Automation around Entra ID☆37Updated 7 months ago
- PowerShell-based Automation of Defender for Endpoint☆165Updated last week
- A set of troubleshooting, diagnostic, and information utilities for Windows☆59Updated 3 weeks ago
- ☆61Updated 2 years ago
- ☆41Updated 2 years ago
- Advanced Hunting Queries for Microsoft Security Products☆107Updated 2 years ago
- Expose a lot of MDE telemetry that is not easily accessible in any searchable form☆107Updated 7 months ago