otoriocyber / DCOM-HardeningTool

Related projects ⓘ

Alternatives and complementary repositories for DCOM-HardeningTool

• invictus-ir / Blue-team-app-Office-365-and-Azure
  ☆70Updated last month
• olafhartong / WDACme
  A WDAC configuration repository with the sole intention of enriching MDE
  ☆27Updated last year
• dwmetz / QuickPcap
  A quick and easy PowerShell script to collect a packet trace with option to convert .etl to .pcap.
  ☆40Updated 2 years ago
• p0w3rsh3ll / SEC505
  ☆49Updated 4 years ago
• eshlomo1 / Azure-AD-Incident-Response
  Azure AD Incident Response
  ☆24Updated 3 years ago
• JeffMichelmore / MDEKit
  ☆40Updated last year
• Spicy-Toaster / ActiveDirectory-Tiering
  Scripts and a short guide for using them to tier an Active Directory. Made for BSides Copenhagen 2024
  ☆36Updated last week
• EvotecIT / PowerShellManager
  Little PowerShell module to extract PowerShell scripts that no longer exists on disk but were run and are still in Event Logs.
  ☆40Updated 3 years ago
• Starke427 / Windows-Security-Policy
  Specific guidance and configuration scripts based on Microsoft-recommended security configuration baselines for Windows.
  ☆11Updated 4 years ago
• Trimarc / Invoke-TrimarcADChecks
  The Invoke-TrimarcADChecks.ps1 PowerShell script is designed to gather data from a single domain AD forest based on our similar checks pe…
  ☆35Updated last year
• alexverboon / DefenderResourceHub
  Defender Resource Hub
  ☆13Updated 3 weeks ago
• olafhartong / DefenderHarvester
  Expose a lot of MDE telemetry that is not easily accessible in any searchable form
  ☆99Updated 4 months ago
• PwC-IR / MIA-MailItemsAccessed-
  Tool to extract Sessions, MessageID(s) and find the emails belonging to MessageID(s). This script utilizes the MailItemsAccessed features…
  ☆38Updated 4 years ago
• Kaidja / EntraID
  Automation around Entra ID
  ☆34Updated 4 months ago
• randomaccess3 / detections
  ☆34Updated 2 weeks ago
• humio / security_monitoring
  ☆40Updated last year
• mdecrevoisier / Windows-auditing-baseline
  Provides an advanced baseline to implement a secure Windows auditing strategy on Windows OS.
  ☆47Updated 10 months ago
• MotiBa / AppLocker
  AppLocker hardening policies
  ☆24Updated 6 years ago
• microsoft / MSEntraIDProtectionGuidance
  MS Entra ID Protection Guidance
  ☆20Updated 7 months ago
• reprise99 / 4688-sysmon
  ☆48Updated last year
• jokezone / Update-Sysmon
  This repository was created to aid in the deployment/maintenance of the Sysmon service on a large number of computers.
  ☆82Updated last year
• thalpius / Microsoft-Defender-for-Identity-Log-Analyzer
  ☆18Updated 5 months ago
• HASecuritySolutions / Sysmon-Manager
  This repo contains information on how to auto deploy Sysmon via GPO and Task Scheduler
  ☆12Updated 3 years ago
• nicolonsky / ITDR
  Collection of Microsoft Identity Threat Detection and Response resources.
  ☆35Updated 2 weeks ago
• WildByDesign / WDACTrayTool
  System Tray Tool for WDAC
  ☆27Updated this week
• Kaidja / Defender-for-Endpoint
  Defender for Endpoint
  ☆27Updated 4 months ago
• MHaggis / ASRGEN
  ASR Configurator, Essentials and Atomic Testing
  ☆36Updated 3 weeks ago
• secgroundzero / KQL_Reference_Manual
  ☆40Updated 3 years ago
• zolderio / misp-to-sentinel
  Azure function to insert MISP data in to Azure Sentinel
  ☆30Updated 2 years ago
• soulemike / ad-awesome
  Microsoft Active Directory (AD) Awesome List
  ☆14Updated this week
• guardsight / gsvsoc_mission-model
  Incident Response Report Using GitHub-Sphinx
  ☆19Updated 5 years ago