
forensic-msvpn
This repository contains Velociraptor artifact and Chainsaw rules to help detect Microsoft Remote Access VPN activity
digital-forensicsforensicsincident-response+1
6

This repository contains Velociraptor artifact and Chainsaw rules to help detect Microsoft Remote Access VPN activity

The purpose of this repository is to share KQL queries to help identify security misconfigurations, hunt for specific patterns, or detect malicious…