YossiSassi / Get-UserSession
Query user sessions for the entire domain (Interactive/RDP etc), allowing you to query a Username and see all their logged on sessions, whether Active or Disconnected
☆88Updated 11 months ago
Related projects ⓘ
Alternatives and complementary repositories for Get-UserSession
- Pushes Sysmon Configs☆89Updated 3 years ago
- ☆58Updated 3 years ago
- PowerHunt is a modular threat hunting framework written in PowerShell that leverages PowerShell Remoting for data collection on scale.☆60Updated 7 months ago
- PowerShell script that aim to help uncovering (eventual) persistence mechanisms deployed by a threat actor following an Active Directory …☆93Updated last year
- Monitor your PingCastle scans to highlight the rule diff between two scans☆107Updated 3 months ago
- ☆65Updated last year
- MDE relies on some of the Audit settings to be enabled☆97Updated 2 years ago
- ☆107Updated 5 years ago
- A series of PowerShell scripts to automate collection of forensic artefacts in most Incident Response environments☆64Updated 2 years ago
- Powershell script to build active directory forest and populate AD with random AD objects including AD users objects, computers objects, …☆28Updated 2 years ago
- ☆48Updated last year
- Provides an advanced input.conf file for Windows and 3rd party related software with more than 70 different event log mapped to the MITRE…☆81Updated last month
- ☆40Updated last year
- gundog - guided hunting in Microsoft Defender☆52Updated 3 years ago
- Get insights into the actual strength and quality of passwords in Active Directory.☆151Updated 4 months ago
- A PowerShell incident response script for quick triage☆75Updated 2 years ago
- This repository was created to aid in the deployment/maintenance of the Sysmon service on a large number of computers.☆82Updated last year
- Simple PowerShell script to enable process scanning with Yara.☆90Updated 2 years ago
- Expose a lot of MDE telemetry that is not easily accessible in any searchable form☆99Updated 4 months ago
- A tiny tool to find and fix common misconfigurations in Active Directory-integrated DNS☆97Updated last month
- Reportly is an AzureAD user activity report tool.☆89Updated last year
- Community Tasks/Plans for PlumHound Queueing☆23Updated last year
- ☆49Updated 4 years ago
- Bloodhound Portable for Windows☆51Updated last year
- A tiny tool built to help AD Admins safely utilize the Protected Users group.☆27Updated last week
- A quick and easy PowerShell script to collect a packet trace with option to convert .etl to .pcap.☆40Updated 2 years ago
- blame Huy☆42Updated 3 years ago
- Provides an advanced baseline to implement a secure Windows auditing strategy on Windows OS.☆47Updated 10 months ago
- Identify the attack paths in BloodHound breaking your AD tiering☆309Updated 2 years ago