mandiant / citrix-ioc-scanner-cve-2023-3519
☆65Updated last year
Alternatives and similar repositories for citrix-ioc-scanner-cve-2023-3519
Users that are interested in citrix-ioc-scanner-cve-2023-3519 are comparing it to the libraries listed below
Sorting:
- Hunting Queries for Defender ATP☆81Updated last month
- ☆62Updated last year
- MDE relies on some of the Audit settings to be enabled☆97Updated 2 years ago
- Monitor your PingCastle scans to highlight the rule diff between two scans☆111Updated 9 months ago
- ☆41Updated last year
- The Invoke-TrimarcADChecks.ps1 PowerShell script is designed to gather data from a single domain AD forest based on our similar checks pe…☆51Updated last year
- A tiny tool built to find and fix common misconfigurations in Active Directory-integrated DNS☆113Updated 3 months ago
- Scripts and a short guide for using them to tier an Active Directory. Made for BSides Copenhagen 2024☆38Updated 6 months ago
- Expose a lot of MDE telemetry that is not easily accessible in any searchable form☆106Updated 5 months ago
- Velociraptor Server hosted in Azure App Service☆42Updated last week
- ☆72Updated 6 months ago
- The "Monash Enterprise Access Model" (MEAM) is a model for tiering Active Directory that builds heavily on the Microsoft Enterprise Acces…☆100Updated 7 months ago
- Pushes Sysmon Configs☆88Updated 3 years ago
- A PowerShell script that automates the security assessment of Microsoft Active Directory environments.☆65Updated 2 years ago
- Collection of Remote Management Monitoring tool artifacts, for assisting forensics and investigations☆88Updated 9 months ago
- VirtualGHOST Detection Tool☆91Updated 11 months ago
- ☆62Updated 3 years ago
- Collection of scripts/resources/ideas for attack surface reduction and additional logging to enable better threat hunting on Windows endp…☆38Updated last year
- Collection of different Azure/Entra focused solutions (Deployable templates, Function Apps, etc)☆66Updated last month
- A collection of various SIEM rules relating to malware family groups.☆66Updated 10 months ago
- ☆41Updated 2 years ago
- This is for my crappy (but hopefully useful) MDE and Sentinel KQL queries! #KQLThePlanet☆12Updated 2 months ago
- Provides an advanced baseline to implement a secure Windows auditing strategy on Windows OS.☆54Updated 4 months ago
- Powershell module for VMWare vSphere forensics☆150Updated 6 months ago
- Perform general security checks against AD environment☆67Updated 3 years ago
- Sentinel Logic Apps, Playbooks and Workbooks to automate enrichment, incident analysis and more.☆92Updated last month
- ResearchDev - XDR & SIEM Detection☆64Updated last month
- A tiny tool built to help AD Admins tame the Protected Users group.☆46Updated 3 months ago
- The purpose of this repository is to share KQL queries to help identify security misconfigurations, hunt for specific patterns, or detect…☆30Updated last week
- Powershell script to build active directory forest and populate AD with random AD objects including AD users objects, computers objects, …☆35Updated 3 years ago