ukncsc / SME
☆437Updated 2 years ago
Related projects: ⓘ
- NMAP Vulnerability Scanning Scripts☆624Updated 2 years ago
- A Cloud Forensics Powershell module to run threat hunting playbooks on data from Azure and O365☆769Updated last year
- Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts…☆898Updated this week
- Sysmon event simulation utility which can be used to simulate the attacks to generate the Sysmon Event logs for testing the EDR detection…☆830Updated 2 years ago
- Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in…☆904Updated 2 weeks ago
- Set of Mindmaps providing a detailed overview of the different #Microsoft auditing capacities for Windows, Exchange, Azure,...☆998Updated 2 weeks ago
- WELA (Windows Event Log Analyzer): The Swiss Army knife for Windows Event Logs! ゑ羅（ウェラ）☆753Updated last year
- BlueHound - pinpoint the security issues that actually matter☆706Updated last year
- Sysmon configuration file template with default high-quality event tracing☆448Updated 7 months ago
- A tool for checking if MFA is enabled on multiple Microsoft Services☆1,295Updated last week
- SMBeagle - Fileshare auditing tool.☆690Updated last year
- Contact: CRT@crowdstrike.com☆699Updated last year
- Bloodhound Reporting for Blue and Purple Teams☆1,105Updated 3 weeks ago
- Powershell Based tool for gathering information related to O365 intrusions and potential Breaches☆688Updated 8 months ago
- Automation scripts to deploy Windows Event Forwarding, Sysmon, and custom audit policies in an Active Directory environment.☆459Updated 6 months ago
- A PowerShell module for acquisition of data from Microsoft 365 and Azure for Incident Response and Cyber Security purposes.☆448Updated last week
- Automation to assess the state of your M365 tenant against CISA's baselines☆1,581Updated this week
- A concise, directive, specific, flexible, and free incident response plan template☆627Updated 4 months ago
- A Windows event logging and collection baseline focused on finding balance between forensic value and optimising retention.☆261Updated 3 years ago
- Monkey365 provides a tool for security consultants to easily conduct not only Microsoft 365, but also Azure subscriptions and Microsoft E…☆799Updated last week
- BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of…☆1,995Updated last year
- A web application that assists network defenders, analysts, and researchers in the process of mapping adversary behaviors to the MITRE AT…☆1,052Updated 2 weeks ago
- AADInternals PowerShell module for administering Azure AD and Office 365☆1,246Updated last month
- Rapidly Search and Hunt through Windows Forensic Artefacts☆2,715Updated 3 weeks ago
- A suite of Tools to aid Incidence Response and Live Forensics for - Windows (Powershell) | Linux (Bash) | MacOS (Shell)☆515Updated last month
- ☆648Updated 2 months ago
- A collection of Azure AD/Entra tools for offensive and defensive security purposes☆1,828Updated 3 weeks ago
- This project aims to compare and evaluate the telemetry of various EDR products.☆1,504Updated 3 weeks ago
- ☆609Updated last year
- Collection of Event ID ressources useful for Digital Forensics and Incident Response☆578Updated 3 months ago