Alternatives and similar repositories for DCOM-HardeningTool

Users that are interested in DCOM-HardeningTool are comparing it to the libraries listed below

• cutaway-security / sawh
  Stand-Alone Windows Hardening (SAWH) is a script to reduce the attack surface of Windows systems that are not attached to a Windows Activ…
  ☆55Updated 4 years ago
• Starke427 / Windows-Security-Policy
  Specific guidance and configuration scripts based on Microsoft-recommended security configuration baselines for Windows.
  ☆14Updated 5 years ago
• dwmetz / QuickPcap
  A quick and easy PowerShell script to collect a packet trace with option to convert .etl to .pcap.
  ☆39Updated 3 years ago
• MotiBa / AppLocker
  AppLocker hardening policies
  ☆26Updated 7 years ago
• olafhartong / WDACme
  A WDAC configuration repository with the sole intention of enriching MDE
  ☆29Updated 7 months ago
• JeffMichelmore / MDEKit
  ☆42Updated 2 years ago
• secgroundzero / KQL_Reference_Manual
  ☆43Updated 4 years ago
• Trimarc / Invoke-TrimarcADChecks
  The Invoke-TrimarcADChecks.ps1 PowerShell script is designed to gather data from a single domain AD forest based on our similar checks pe…
  ☆60Updated 2 years ago
• EvotecIT / PowerShellManager
  Little PowerShell module to extract PowerShell scripts that no longer exists on disk but were run and are still in Event Logs.
  ☆40Updated 5 years ago
• Kaidja / EntraID
  Automation around Entra ID
  ☆38Updated 6 months ago
• humio / security_monitoring
  ☆43Updated 2 years ago
• invictus-ir / Blue-team-app-Office-365-and-Azure
  ☆73Updated last year
• PwC-IR / MIA-MailItemsAccessed-
  Tool to extract Sessions, MessageID(s) and find the emails belonging to MessageID(s). This script utilizes the MailItemsAccessed features…
  ☆41Updated 5 years ago
• eshlomo1 / Azure-AD-Incident-Response
  Azure AD Incident Response
  ☆27Updated 4 years ago
• reprise99 / mddrguidance
  Links and guidance related to the return on mitigation report in the Microsoft Digital Defense Report
  ☆28Updated 2 years ago
• p0w3rsh3ll / SEC505
  ☆51Updated 5 years ago
• reprise99 / 4688-sysmon
  ☆61Updated 2 years ago
• scriptjunkie / fwallower
  Analyze Windows Firewall outbound blocks and selectively allow traffic
  ☆69Updated 3 years ago
• mdecrevoisier / Windows-WEC-server_auto-deploy
  PowerShell scripts for fast Windows Event Collector configuration with Palantir toolset
  ☆22Updated 3 years ago
• theaj42 / presentations
  ☆17Updated 3 years ago
• airbus-cert / ntTraceControl
  Powershell Event Tracing Toolbox
  ☆77Updated 3 years ago
• ugurkocde / KQL-Search
  ☆31Updated 2 years ago
• alexverboon / DefenderResourceHub
  Defender Resource Hub
  ☆29Updated 2 weeks ago
• olafhartong / DefenderHarvester
  Expose a lot of MDE telemetry that is not easily accessible in any searchable form
  ☆113Updated 5 months ago
• mdecrevoisier / Windows-auditing-baseline
  Provides an advanced baseline to implement a secure Windows auditing strategy on Windows OS.
  ☆58Updated 7 months ago
• zolderio / misp-to-sentinel
  Azure function to insert MISP data in to Azure Sentinel
  ☆34Updated 3 years ago
• jangeisbauer / gundog2
  Microsoft 365 Defender Hunting via PowerShell.
  ☆14Updated 3 years ago
• msdirtbag / azurevelo
  Velociraptor Server hosted in Azure App Service
  ☆59Updated 7 months ago
• Kaidja / Defender-for-Endpoint
  Defender for Endpoint
  ☆28Updated last year
• f-bader / XDRStoryParser
  Visualize Microsoft Defender XDR process trees and security events
  ☆33Updated 4 months ago