janstarke / ntdsextract2
This aims to be a collection of tools to forensically analyze Active Directory databases
☆21Updated last month
Alternatives and similar repositories for ntdsextract2:
Users that are interested in ntdsextract2 are comparing it to the libraries listed below
- Yara Rules for Modern Malware☆73Updated 10 months ago
- ☆24Updated 2 years ago
- orc2timeline extracts and analyzes artifacts contained in archives generated with DFIR-ORC.exe to create a timeline from them☆30Updated last month
- ☆131Updated 5 months ago
- Tool to extract powerful tokens from Office desktop apps memory☆68Updated 10 months ago
- ☆34Updated 10 months ago
- This repository is meant to catalog network and host artifacts associated with various EDR products "shell" and response functionalities.☆76Updated 4 months ago
- A simple tool designed to create Atomic Red Team tests with ease.☆36Updated last month
- PowerShell script that aim to help uncovering (eventual) persistence mechanisms deployed by a threat actor following an Active Directory …☆93Updated last year
- All kinds of tiny shells☆58Updated last year
- pysnaffler☆88Updated 2 weeks ago
- DEFCON 31 slide deck and video link☆58Updated 6 months ago
- ☆77Updated last month
- Ludus is a system to build easy to use cyber environments, or "ranges" for testing and development.☆27Updated 10 months ago
- Repo containing various intel-based resources such as threat research, adversary emulation/simulation plan and so on☆81Updated 8 months ago
- ☆53Updated last year
- A comprehensive workshop aimed to equip participants with an in-depth understanding of modern Command and Control (C2) concepts, focusing…☆98Updated last year
- ☆54Updated last year
- Info related to the Outflank training: Microsoft Office Offensive Tradecraft☆51Updated 8 months ago
- Living Off the Foreign Land setup scripts☆64Updated last week
- This is a simulation of attack by Fancy Bear group (APT28) targeting high-ranking government officials Western Asia and Eastern Europe☆32Updated 7 months ago
- A small utility to translate NTDS.dit files to SQLite format.☆68Updated last year
- Ransomware Simulator for testing Blue Team Detections☆37Updated 2 years ago
- DPAPILAB Next Gen, script collection☆76Updated 2 years ago
- Indicators of compromise from to analysis and research by Nextron Threat Research team☆10Updated 3 months ago
- Create a cool process tree like https://twitter.com/ACEResponder.☆34Updated last year
- Simple PowerShell script to enable process scanning with Yara.☆91Updated 2 years ago
- Small utility to chunk up a large BloodHound JSON file into smaller files for importing.☆90Updated last year