A running list of Windows sources and the related event ids.
☆19Aug 2, 2023Updated 3 years ago
Alternatives and similar repositories for Windows-Event-Logs-With-Event-IDs
Users that are interested in Windows-Event-Logs-With-Event-IDs are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Collection of scripts/resources/ideas for attack surface reduction and additional logging to enable better threat hunting on Windows endp…☆38Apr 5, 2024Updated 2 years ago
- ☆13Oct 7, 2019Updated 6 years ago
- Windows Defender ATP - Advanced Hunting Queries☆22Apr 12, 2018Updated 8 years ago
- ☆15Sep 24, 2024Updated last year
- multi-threaded script uses VirusTotal and AbuseIPDB APIs and generate an excel with all needed data☆10Mar 14, 2023Updated 3 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- This repository provide a json file for all Windows security Event IDs with lot of useful informations (Categories, GPO, Volume, Recomman…☆11Mar 2, 2023Updated 3 years ago
- MAL-CL (Malicious Command-Line)☆331Jan 10, 2023Updated 3 years ago
- Volatility 3 Plugins☆21Oct 3, 2022Updated 3 years ago
- A repository of Sysmon For Linux configuration modules☆17Oct 14, 2021Updated 4 years ago
- My various command line scripts that I'm using on my Debian desktops and servers☆12Jul 24, 2026Updated 3 weeks ago
- ☆16May 27, 2019Updated 7 years ago
- Ingesting Shodan Monitor Alerts to Microsoft Sentinel☆33Sep 19, 2023Updated 2 years ago
- Splunk App for MITRE Att&CK Navigator(TM)☆23Mar 25, 2021Updated 5 years ago
- Azure OpenAI Playbook created for Microsoft Sentinel☆14May 2, 2024Updated 2 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- A collection of famous recon public scripts, but in bash <3☆30Mar 2, 2021Updated 5 years ago
- Common framework for designing a detection and response framework for the most common MFT solutions☆16Aug 4, 2023Updated 3 years ago
- ☆52Mar 4, 2019Updated 7 years ago
- Python BlueSky client☆10Aug 4, 2023Updated 3 years ago
- Ansible role for security standards compliance☆13Mar 6, 2019Updated 7 years ago
- GraphSpecter is a tool to audit GraphQL API☆22Oct 6, 2025Updated 10 months ago
- ☆11Dec 25, 2020Updated 5 years ago
- Sigma Detection Rule Repository☆93Jun 18, 2020Updated 6 years ago
- Easy discovery of assets☆13Jun 22, 2022Updated 4 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Sigma rules to share with the community☆126Jan 29, 2025Updated last year
- Repository of attack and defensive information for Business Email Compromise investigations☆278Jun 17, 2026Updated last month
- ☆11May 15, 2020Updated 6 years ago
- Sigma detection rules for hunting with the threathunting-keywords project☆60Mar 2, 2025Updated last year
- A proof-of-concept re-assembler for reverse VNC traffic.☆24May 21, 2023Updated 3 years ago
- ☆23Jan 29, 2024Updated 2 years ago
- Lightweight and extensible horizontal vulnerability scanner☆11Dec 8, 2022Updated 3 years ago
- A script written in python3 to spread blind cross-site scripting payloads on HTTP requests headers☆10Oct 2, 2022Updated 3 years ago
- ALFA stands for Automated Audit Log Forensic Analysis for Google Workspace. You can use this tool to acquire all Google Workspace audit l…☆183Mar 2, 2026Updated 5 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Finds Domain Controller on a network, enumerates users, AS-REP Roasting and hash cracking, bruteforces password, dumps AD users, DRSUAPI,…☆18Sep 23, 2023Updated 2 years ago
- ☆34Aug 8, 2023Updated 3 years ago
- Template☆19Sep 3, 2024Updated last year
- A PoC that uses the DirSync protocol to poll Active Directory for changes☆13Aug 16, 2020Updated 5 years ago
- Validates Sigma rules using the JSON schema☆24Apr 24, 2026Updated 3 months ago
- This repo will contain the core detection, only for Cobaltstrike's leaked versions. Non-leaked version detections wont be shared☆92Oct 12, 2023Updated 2 years ago
- Credax - Fuzzing Tool with Slack Notifications. Also removes false positive responses.☆10Oct 14, 2021Updated 4 years ago