WiredPulse / EIF_ParserLinks
Evil Inject Finder Remote Capability and Parser
☆11Updated 6 years ago
Alternatives and similar repositories for EIF_Parser
Users that are interested in EIF_Parser are comparing it to the libraries listed below
Sorting:
- A collection of searches, interesting events and tables on Crowdstrike Splunk.☆29Updated 4 years ago
- Microsoft GPO Readiness Lateral Movement Detection Tool☆16Updated 2 years ago
- BloodHound Data Scanner☆45Updated 5 years ago
- A collection of hunting and blue team scripts. Mostly others, some my own.☆37Updated 2 years ago
- Detect possible sysmon logging bypasses given a specific configuration☆110Updated 6 years ago
- Visual Studio Code Microsoft Sysinternal Sysmon configuration file extension.☆53Updated 2 years ago
- Set of ultra technical notes about AD☆18Updated 7 years ago
- Threat Mitigation Strategies☆25Updated 2 months ago
- ☆76Updated 7 years ago
- ☆18Updated 6 years ago
- A tool for auditing network shares in an Active Directory environment☆43Updated 6 years ago
- PowerSponse is a PowerShell module focused on targeted containment and remediation during incident response.☆38Updated 3 years ago
- Defensive-oriented Active Directory enumeration☆23Updated 9 years ago
- PSAttck is a light-weight framework for the MITRE ATT&CK Framework.☆38Updated 3 years ago
- A collection of useful PowerShell tools to collect, organize, and visualize Sysmon event data☆39Updated 5 years ago
- See adversary, do adversary: Simple execution of commands for defensive tuning/research (now with more ELF on the shelf)☆104Updated 2 years ago
- Active Directory Toolkit☆20Updated 6 years ago
- This module mangles two lists of names together to generate a list of potential email addresses or usernames. It can also be used to simp…☆50Updated 8 years ago
- A companion tool for BloodHound offering Active Directory statistics and number crunching☆64Updated 7 years ago
- My conference presentations☆85Updated 3 weeks ago
- Presentation Slides☆26Updated 6 years ago
- ☆15Updated 4 years ago
- PurpleSpray is an adversary simulation tool that executes password spray behavior under different scenarios and conditions with the purpo…☆50Updated 6 years ago
- ☆20Updated 4 years ago
- Creates an ATT&CK Navigator map of an Adversary Emulation Plan☆17Updated 4 years ago
- Crowdstrike Falcon Host script for iterating through instances to get alert and other relevant data☆13Updated 6 years ago
- OSSEM Modular☆27Updated 5 years ago
- Python parser for Red Canary's Atomic Red Team Yamls☆27Updated 6 years ago
- This script runs several security checks and makes modifications (with your permission) to your Active Directory domain to improve it's s…☆45Updated 9 years ago
- A completely unsupported set of scripts used in SANS FOR572, Advanced Network Forensics and Analysis☆28Updated 2 months ago