mattifestation / DeviceGuardBypassMitigationRules
A reference Device Guard code integrity policy consisting of FilePublisher deny rules for published Device Guard configuration bypasses
☆114Updated 7 years ago
Related projects: ⓘ
- PowerKrabsEtw is a PowerShell interface for doing real-time ETW tracing.☆103Updated 3 years ago
- Some PowerShell Defensive Scripts☆126Updated 8 years ago
- IR-Tools - PowerShell tools for IR☆128Updated 7 years ago
- ☆97Updated 8 years ago
- Sysmon configuration☆66Updated 6 years ago
- A PowerShell module to abstract the complexities of Permanent WMI Event Subscriptions☆54Updated 8 years ago
- Basic demo for Hidden Treasure talk.☆49Updated 6 years ago
- ☆37Updated 8 years ago
- ☆88Updated this week
- ☆52Updated this week
- POC Highlighting Obfuscation Techniques used by FIN threat actors based on cmd.exe's replace functionality and cmd.exe/powershell.exe's s…☆102Updated 7 years ago
- PowerShellMethodAuditor listens to the PowerShell ETW provider and logs PowerShell method invocations.☆37Updated 7 years ago
- Active Directory Group Policy analyzer☆94Updated 10 years ago
- PowerShell script to find 'vulnerable' security-related GPOs that should be hardended☆193Updated 6 years ago
- Currently not updated for WMIEvent module...☆261Updated 8 years ago
- PowerShell implementations of path-finding algorithms using graph theory☆78Updated 8 years ago
- ☆59Updated 5 years ago