mandiant / citrix-ioc-scanner-cve-2023-3519
☆65Updated last year
Alternatives and similar repositories for citrix-ioc-scanner-cve-2023-3519:
Users that are interested in citrix-ioc-scanner-cve-2023-3519 are comparing it to the libraries listed below
- A tiny tool built to find and fix common misconfigurations in Active Directory-integrated DNS☆112Updated 3 months ago
- Monitor your PingCastle scans to highlight the rule diff between two scans☆111Updated 8 months ago
- MDE relies on some of the Audit settings to be enabled☆97Updated 2 years ago
- ☆72Updated 6 months ago
- Pushes Sysmon Configs☆88Updated 3 years ago
- Hunting Queries for Defender ATP☆81Updated last week
- ☆62Updated last year
- The Invoke-TrimarcADChecks.ps1 PowerShell script is designed to gather data from a single domain AD forest based on our similar checks pe…☆50Updated last year
- ☆41Updated 2 years ago
- Expose a lot of MDE telemetry that is not easily accessible in any searchable form☆105Updated 4 months ago
- A tiny tool built to help AD Admins tame the Protected Users group.☆46Updated 3 months ago
- ☆62Updated 3 years ago
- Collection of scripts/resources/ideas for attack surface reduction and additional logging to enable better threat hunting on Windows endp…☆38Updated last year
- ☆41Updated last year
- The "Monash Enterprise Access Model" (MEAM) is a model for tiering Active Directory that builds heavily on the Microsoft Enterprise Acces…☆99Updated 6 months ago
- Collection of Remote Management Monitoring tool artifacts, for assisting forensics and investigations☆86Updated 8 months ago
- A collection of various SIEM rules relating to malware family groups.☆66Updated 10 months ago
- Provides an advanced baseline to implement a secure Windows auditing strategy on Windows OS.☆54Updated 3 months ago
- VirtualGHOST Detection Tool☆91Updated 11 months ago
- Powershell module for VMWare vSphere forensics☆150Updated 5 months ago
- Provides an advanced input.conf file for Windows and 3rd party related software with more than 70 different event log mapped to the MITRE…☆90Updated 2 months ago
- Scripts and a short guide for using them to tier an Active Directory. Made for BSides Copenhagen 2024☆38Updated 5 months ago
- This is for my crappy (but hopefully useful) MDE and Sentinel KQL queries! #KQLThePlanet☆12Updated last month
- A PowerShell script that automates the security assessment of Microsoft Active Directory environments.☆65Updated 2 years ago
- MITRE ATT&CK mapped queries for SentinelOne Deep Visiblity☆90Updated 4 years ago
- A PowerShell incident response script for quick triage☆80Updated 2 years ago
- Sentinel Logic Apps, Playbooks and Workbooks to automate enrichment, incident analysis and more.☆92Updated 2 weeks ago
- Azure function to insert MISP data in to Azure Sentinel☆32Updated 2 years ago
- Slides of my public talks☆55Updated last year
- Notes on responding to security breaches relating to Azure AD☆110Updated 3 years ago