lordsaibat / finding_windows_privileges
Windows privileges add to the complexity of Windows user permissions. Each additional user added to a group could lead to a domain compromise if not evaluated. Privileges can override permission causing a gap of perceived effective permission.
☆10Updated 6 years ago
Alternatives and similar repositories for finding_windows_privileges:
Users that are interested in finding_windows_privileges are comparing it to the libraries listed below
- Get all AD objects which are hidden from you☆18Updated 7 years ago
- A Windows REG file to enable all default PowerShell logging on a system with PowerShell v5 installed☆16Updated 8 years ago
- OSSEM Modular☆27Updated 4 years ago
- Set of ultra technical notes about AD☆18Updated 6 years ago
- Defensive-oriented Active Directory enumeration☆23Updated 8 years ago
- Threat Mitigation Strategies☆25Updated last year
- BloodHound Data Scanner☆44Updated 4 years ago
- Automated forensics written in PowerShell☆34Updated 5 years ago
- ☆31Updated last month
- Set of utilities for getting information about Windows Events☆15Updated 6 years ago
- ☆11Updated 6 years ago
- A simple utility to check the status of and/or disable SMBv1 on Windows system via Cb Response's Live Response functionality.☆15Updated 5 years ago
- gpocheck☆30Updated 5 months ago
- Notebooks created to attack and secure Active Directory environments☆27Updated 5 years ago
- B-Sides CBR 2018 talk about group policy and Grouper☆39Updated 5 years ago
- A collection of threat intelligence data such as IOC, Yara and Snort/Suricata Rules etc.☆10Updated 5 years ago
- Visual Studio Code Microsoft Sysinternal Sysmon configuration file extension.☆51Updated last year
- PowerShell script useful for Incident Response and security/configuration baselines for Windows Vista and later☆20Updated 8 years ago
- Custom scripts released for BSidesDC 2016☆14Updated 8 years ago
- Trace ScriptBlock execution for powershell v2☆39Updated 5 years ago
- Babel-Shellfish deobfuscates and scans Powershell scripts on real-time right before each line execution.☆41Updated 6 years ago
- Event metadata collected across all manifest-based ETW providers on Window 10 1903☆31Updated 5 years ago
- incident response scripts☆19Updated 5 years ago
- Crowdstrike Falcon Host script for iterating through instances to get alert and other relevant data☆13Updated 5 years ago
- Obtains a list of GPOs based on known Client Side Extensions (CSE) that normally contain passwords☆32Updated 5 years ago