lordsaibat / finding_windows_privileges
Windows privileges add to the complexity of Windows user permissions. Each additional user added to a group could lead to a domain compromise if not evaluated. Privileges can override permission causing a gap of perceived effective permission.
☆10Updated 7 years ago
Alternatives and similar repositories for finding_windows_privileges:
Users that are interested in finding_windows_privileges are comparing it to the libraries listed below
- ☆11Updated 6 years ago
- OSSEM Modular☆27Updated 4 years ago
- Get all AD objects which are hidden from you☆18Updated 7 years ago
- BloodHound Data Scanner☆44Updated 4 years ago
- Set of ultra technical notes about AD☆18Updated 6 years ago
- A simple utility to check the status of and/or disable SMBv1 on Windows system via Cb Response's Live Response functionality.☆15Updated 5 years ago
- ☆17Updated 6 years ago
- Threat Mitigation Strategies☆25Updated last year
- Mass Triage Tools☆20Updated last month
- Automated forensics written in PowerShell☆34Updated 5 years ago
- Crack your macros like the math pros.☆33Updated 8 years ago
- Defensive-oriented Active Directory enumeration☆23Updated 9 years ago
- Obtains a list of GPOs based on known Client Side Extensions (CSE) that normally contain passwords☆33Updated 5 years ago
- B-Sides CBR 2018 talk about group policy and Grouper☆39Updated 5 years ago
- A Windows REG file to enable all default PowerShell logging on a system with PowerShell v5 installed☆16Updated 8 years ago
- Crowdstrike Falcon Host script for iterating through instances to get alert and other relevant data☆13Updated 5 years ago
- ☆18Updated 5 years ago
- ☆31Updated 4 months ago
- Set of utilities for getting information about Windows Events☆15Updated 6 years ago
- Custom scripts released for BSidesDC 2016☆14Updated 8 years ago
- ☆26Updated 6 years ago
- Presentation materials for talks I've given.☆20Updated 5 years ago
- A PowerShell script to parse the docx/docm file format and update the template location.☆17Updated 5 years ago
- Event metadata collected across all manifest-based ETW providers on Window 10 1903☆31Updated 5 years ago
- Notebooks created to attack and secure Active Directory environments☆27Updated 5 years ago
- Visual Studio Code Microsoft Sysinternal Sysmon configuration file extension.☆51Updated last year
- Babel-Shellfish deobfuscates and scans Powershell scripts on real-time right before each line execution.☆43Updated 6 years ago
- Presentation Slides☆27Updated 5 years ago
- A collection of searches, interesting events and tables on Crowdstrike Splunk.☆29Updated 4 years ago
- ☆9Updated 8 years ago