
DCSYNCMonitor
Monitors for DCSYNC and DCSHADOW attacks and create custom Windows Events for these events.
defensive-toolsincident-responseintrusion-detection+1
141

Monitors for DCSYNC and DCSHADOW attacks and create custom Windows Events for these events.

A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.

IMDSPOOF is a cyber deception tool that spoofs the AWS IMDS service to return HoneyTokens that can be alerted on.

A tool to be used in post exploitation phase for blue and red teams to bypass APPLICATIONCONTROL policies

Defensive research tool that documents observable API endpoints and user agents of offensive tooling targeting Microsoft Entra ID, supporting…

A tool that removes traces of executed applications on Windows OS.