mr-r3b00t / ExchangeMarch2021IOCHuntLinks
Really fast knock up use at own risk etc.
☆18Updated 4 years ago
Alternatives and similar repositories for ExchangeMarch2021IOCHunt
Users that are interested in ExchangeMarch2021IOCHunt are comparing it to the libraries listed below
Sorting:
- gundog - guided hunting in Microsoft Defender☆52Updated 4 years ago
- A quick and easy PowerShell script to collect a packet trace with option to convert .etl to .pcap.☆40Updated 2 years ago
- Azure AD Incident Response☆25Updated 3 years ago
- Just a bunch of code snippets to identify and remediate common Active Directory Certificate Services issues.☆32Updated last year
- Query user sessions for the entire domain (Interactive/RDP etc), allowing you to query a Username and see all their logged on sessions, w…☆92Updated 2 months ago
- ☆62Updated 3 years ago
- ☆114Updated 5 years ago
- Microsoft GPO Readiness Lateral Movement Detection Tool☆16Updated 2 years ago
- Bloodhound Portable for Windows☆51Updated 2 years ago
- This script validates the most common Conditional Access policies in Microsoft 365.☆9Updated last year
- Powershell script to build active directory forest and populate AD with random AD objects including AD users objects, computers objects, …☆35Updated 3 years ago
- Enumerate Microsoft 365 Groups in a tenant with their metadata☆53Updated 4 years ago
- Kerberoast Detection Script☆30Updated 7 months ago
- The Invoke-TrimarcADChecks.ps1 PowerShell script is designed to gather data from a single domain AD forest based on our similar checks pe…☆51Updated last year
- A set of Python scripts for finding threats in Office365☆50Updated 2 years ago
- Get insights into the actual strength and quality of passwords in Active Directory.☆154Updated 10 months ago
- These are some of the commands which I use frequently during Malware Analysis and DFIR.☆24Updated last year
- ☆65Updated last year
- ☆46Updated 2 years ago
- Random PowerShell scripts worth sharing☆35Updated 3 years ago
- PowerShell script to get domain mail info and control status such as MX, SPF, DKIM, DMARC and StartTLS.☆12Updated 2 weeks ago
- Searches open files shares for password files, database backups, etc. Extend as you see fit☆29Updated 5 years ago
- Designed to be installed on a fresh install of raspbian on a raspberry pi, by combining Respounder (Responder detection) and Artillery (p…☆34Updated 5 years ago
- A WDAC configuration repository with the sole intention of enriching MDE☆28Updated 2 years ago
- PowerShell Script to facilitate the processing of SRUM data for on-the-fly forensics and if needed threat hunting☆23Updated 5 years ago
- ☆49Updated 5 years ago
- Automation around Entra ID☆36Updated 6 months ago
- Little PowerShell module to extract PowerShell scripts that no longer exists on disk but were run and are still in Event Logs.☆40Updated 4 years ago
- Nessus Preflight(NPF) Check for local and remote systems. Essentially sets three registry keys and restarts a service to allow nessus to …☆16Updated last month
- Build a domain with three quick PowerShell scripts!☆29Updated 5 years ago