Archived
EventLogging
blackhillsinfosec/eventloggingAutomation scripts to deploy Windows Event Forwarding, Sysmon, and custom audit policies in an Active Directory environment.
defensive-toolsscripting-automationconfiguration-auditing+3
Tools for blue team, defensive security, and threat protection.
blackhillsinfosec/eventloggingAutomation scripts to deploy Windows Event Forwarding, Sysmon, and custom audit policies in an Active Directory environment.
azuread/azure-ad-incident-response-powershell-moduleThe Azure Active Directory Incident Response PowerShell module provides a number of tools, developed by the Azure Active Directory Product Group in…
jsa2/caopticsCA Optics - Azure AD Conditional Access Gap Analyzer
netwrix/pingcastlecloudAudit program for AzureAD
grahamcampbell/laravel-securityA wrapper of voku/anti-xss for Laravel
kolya5544/bearftpHoneypot FTP server written in .NET Core (C#) for both Linux and Windows.
jotaqc/cve-2022-30190_temporary_fix_source_codeThese are the source codes of the Python scripts to apply the temporary protection against the CVE-2022-30190 vulnerability (Follina)
itinerisltd/trellis-cve-2018-6389Mitigate CVE-2018-6389 WordPress load-scripts / load-styles attacks
cosmo121/follina-remediationRemoves the ability for MSDT to run, in response to CVE-2022-30190 (Follina)
rastating/modsecurity-cve-2018-6389A ModSecurity ruleset for detecting potential attacks using CVE-2018-6389
qixils/anticropalypseDiscord bot for mitigating the aCropalypse vulnerability (CVE-2023-21036, CVE-2023-28303) by retroactively deleting vulnerable images
lopqto/cve-2021-41773_honeypotSimple honeypot for CVE-2021-41773 vulnerability
keowu/badrentdrv2A vulnerable driver exploited by me (BYOVD) that is capable of terminating several EDRs and antivirus software in the market, rendering them…
gamingwithevets/msdt-disableMSDT protocol disabler (CVE-2022-30190 patch tool)
