rtkwlf / wolf-toolsLinks
Tools and scripts by Arctic Wolf
☆70Updated 6 months ago
Alternatives and similar repositories for wolf-tools
Users that are interested in wolf-tools are comparing it to the libraries listed below
Sorting:
- Collection of useful Canary tools☆91Updated this week
- CrowdStrike Archive Scan Tool☆85Updated 3 years ago
- ☆67Updated 4 years ago
- ☆192Updated last month
- Find and notify users in your Active Directory with weak passwords☆103Updated 4 years ago
- ☆43Updated 2 years ago
- OpenIOC rules to facilitate hunting for indicators of compromise☆37Updated 4 years ago
- GUI tool which enables you to parse nessus scan files from Nessus and Tenable.SC by (C) Tenable, Inc. and exports results to a spreadshee…☆108Updated 3 months ago
- The PoLRBear Project☆35Updated 4 years ago
- ☆73Updated 2 years ago
- Unleash the power of the Falcon Platform at the CLI☆134Updated 3 months ago
- Collection of PowerShell functinos and scripts a Blue Teamer might use☆89Updated 2 years ago
- Logmira by Blumira has been created by Amanda Berlin as a helpful download of Microsoft Windows Domain Group Policy Object settings.☆62Updated last year
- Creating a hardened "Blue Forest" with Server 2016/2019 Domain Controllers☆268Updated last year
- Find accounts using common and default passwords in Active Directory.☆70Updated 6 years ago
- Hashes for vulnerable LOG4J versions☆156Updated 4 years ago
- Pushes Sysmon Configs☆90Updated 4 years ago
- Endpoint detection for remote hosts for consumption by RITA and Elasticsearch☆79Updated 3 months ago
- ☆78Updated last month
- This repository was created to aid in the deployment/maintenance of the Sysmon service on a large number of computers.☆83Updated 2 years ago
- AzureADRecon is a tool which gathers information about the Azure Active Directory and generates a report which can provide a holistic pic…☆211Updated last year
- RRR (Rapid Response Reporting) is a collection of Incident Response Report objects. They are designed to help incident responders provid…☆37Updated 3 years ago
- Elastic Beat for fetching and shipping Office 365 audit events☆68Updated 5 years ago
- ☆82Updated last year
- Community Tasks/Plans for PlumHound Queueing☆23Updated 2 years ago
- Internal network honeypot for detecting if an attacker or insider threat scans your network for log4j CVE-2021-44228☆151Updated 4 years ago
- Create alerts in The Hive from your Graylog alerts, to be turned into Hive cases.☆45Updated 5 years ago
- A tool to modify timestamps in a packet capture to a user selected date☆31Updated 4 years ago
- A collection of Powershell scripts that will help automate the build process for a Marvel domain.☆152Updated last year
- MDE relies on some of the Audit settings to be enabled☆100Updated 3 years ago