microsoft / AttackSurfaceAnalyzer
Attack Surface Analyzer can help you analyze your operating system's security configuration for changes during software installation.
☆2,792Updated 2 weeks ago
Alternatives and similar repositories for AttackSurfaceAnalyzer:
Users that are interested in AttackSurfaceAnalyzer are comparing it to the libraries listed below
- ☆2,658Updated last year
- Sparrow.ps1 was created by CISA's Cloud Forensics team to help detect possible compromised accounts and applications in the Azure/m365 en…☆1,422Updated 2 years ago
- A repository of sysmon configuration modules☆2,734Updated 6 months ago
- Automate the creation of a lab environment complete with security tooling and logging best practices☆4,700Updated 8 months ago
- PingCastle - Get Active Directory Security at 80% in 20% of the time☆2,455Updated last week
- Investigate malicious Windows logon by visualizing and analyzing Windows event log☆2,847Updated 8 months ago
- Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis…☆2,511Updated 7 months ago
- Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term o…☆2,427Updated last month
- Microsoft Threat Intelligence Security Tools☆1,819Updated this week
- Utilities for Sysmon☆1,506Updated last week
- TrustedSec Sysinternals Sysmon Community Guide☆1,188Updated 9 months ago
- A curated list of awesome Security Hardening techniques for Windows.☆1,760Updated 5 years ago
- HardeningKitty and Windows Hardening Settings☆2,423Updated this week
- Rapidly Search and Hunt through Windows Forensic Artefacts☆3,061Updated 2 months ago
- Sysmon configuration file template with default high-quality event tracing☆4,915Updated 8 months ago
- ☆2,248Updated last year
- Web app that provides basic navigation and annotation of ATT&CK matrices☆2,070Updated last month
- Digging Deeper....☆3,134Updated this week
- Detect Tactics, Techniques & Combat Threats☆2,119Updated last month
- A toolset to make a system look as if it was the victim of an APT attack☆2,528Updated last year
- A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more e…☆4,137Updated last year
- VECTR is a tool that facilitates tracking of your red and blue team testing activities to measure detection and prevention capabilities a…☆1,439Updated last month
- Directory Services Internals (DSInternals) PowerShell Module and Framework☆1,719Updated this week
- Logging Made Easy☆708Updated last year
- Malwoverview is a first response tool used for threat hunting and offers intel information from Virus Total, Hybrid Analysis, URLHaus, Po…☆3,107Updated last month
- Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs an…☆2,070Updated last week
- PowerForensics provides an all in one platform for live disk forensic analysis☆1,392Updated last year
- Guidance for mitigation web shells. #nsacyber☆972Updated last year
- Simple (relatively) things allowing you to dig a bit deeper than usual.☆3,313Updated last month
- Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.☆1,285Updated 2 years ago