jebidiah-anthony / Windows-Event-Forwarder
Setting up a Windows Event Collector
☆11Updated last year
Related projects ⓘ
Alternatives and complementary repositories for Windows-Event-Forwarder
- Powershell Event Tracing Toolbox☆72Updated 2 years ago
- A PowerShell module for incident response and threat hunting.☆33Updated 5 months ago
- Monitor your PingCastle scans to highlight the rule diff between two scans☆107Updated 3 months ago
- Collection of scripts to retrieve stored passwords from Veeam Backup☆96Updated last year
- A set of troubleshooting, diagnostic, and information utilities for Windows☆52Updated 3 weeks ago
- Powershell module for VMWare vSphere forensics☆140Updated this week
- Pushes Sysmon Configs☆89Updated 3 years ago
- ☆48Updated 4 years ago
- PowerShell module for SentinelOne API☆63Updated last year
- Windows 10/11 hardening scripts☆218Updated 9 months ago
- ☆65Updated last year
- A tiny tool to find and fix common misconfigurations in Active Directory-integrated DNS☆96Updated last month
- Scrapes the Windows Evaluation ISO addresses into a JSON data file☆24Updated last week
- Analyze Windows Firewall outbound blocks and selectively allow traffic☆69Updated last year
- AdmPwd.E client and support tools☆31Updated 4 years ago
- Custom ADMX template focused on hardening Windows 10 & Windows 11 systems☆75Updated last week
- Sysmon configuration file templates with advanced event tracing and blocking☆34Updated last month
- C# based evtx parser with lots of extras☆281Updated 2 months ago
- ☆146Updated last year
- Provides an advanced input.conf file for Windows and 3rd party related software with more than 70 different event log mapped to the MITRE…☆81Updated last month
- Windows and macOS Hardening Interface to make security more accessible.☆38Updated 2 years ago
- MDE relies on some of the Audit settings to be enabled☆97Updated 2 years ago
- PowerShell module for SentinelOne API☆25Updated 3 years ago
- ☆187Updated 2 weeks ago
- ☆58Updated 3 years ago
- Event Tracing For Windows (ETW) Resources☆348Updated last month
- Universal Winlogbeat configuration☆30Updated 2 years ago
- A collection of tools to interact with Microsoft Security Response Center API☆95Updated 10 months ago
- PowerRunAsSystem is a PowerShell script, also available as an installable module through the PowerShell Gallery, designed to impersonate …☆250Updated 3 weeks ago
- Policy Module for Microsoft Active Directory Certificate Services☆123Updated last week