AD-description-password-finder
assurancemaladiesec/ad-description-password-finderRetrieve AD accounts description and search for password in it
defensive-toolspassword-crackingpassword-attacks+5
81
Tools for blue team, defensive security, and threat protection.
assurancemaladiesec/ad-description-password-finderRetrieve AD accounts description and search for password in it
kacos2000/evtx_log_browserEvtx Log (xml) Browser
neo23x0/raccineA Simple Ransomware Vaccine
azuread/azureadassessmentTooling for assessing an Azure AD tenant state and configuration
c3rb3ru5d3d53c/mwcfgA Feature Rich Modular Malware Configuration Extraction Utility for MalDuck
reprise99/sentinel-queriesCurated collection of Microsoft Sentinel KQL queries and tutorials for hunting threats, analyzing Azure AD sign-in logs, detecting anomalies, and…
anssi-fr/dfir4vspherePowershell module for VMWare vSphere forensics
epixoip/hmac-bcryptThe hmac-bcrypt password hashing function
redcanaryco/atomictestharnessesPublic Repo for Atomic Test Harness
sigmahq/pysigma-backend-opensearchConverts Sigma detection rules into OpenSearch Lucene and PPL queries, including alerting Monitor Rules and correlation support for SIEM detection…
sigmahq/sigma-cliThe Sigma command line interface based on pySigma
gossithedog/threathuntingHunts for potential malware downloads and suspicious domain calls via common Windows LOLBins using YARA rules and Nexthink telemetry modules.
the-dfir-report/sigma-rulesRules generated from our investigations.
michenriksen/drawio-threatmodelingDraw.io libraries for threat modeling diagrams
target/strelka-uiStrelka Web UI for File Submission and Analysis
cloud-architekt/azuread-attack-defenseThis publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can…