driverenok Goto Github PK

auditd

Best Practice Auditd Configuration

censys-python

An easy-to-use and lightweight API wrapper for Censys APIs.

conti_202202_leak_procedures

This repository contains procedures found in the Feb 2022 conti leaks. They were taken from the "manual_teams_c" rocketchat channel in the leak and posted on may 10th, 2021 in the channel.

evtx-etw-resources

Event Tracing For Windows (ETW) Resources

john

John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs

maba

Helper for dumping/analyzing MBR/GPT dump file

misc-research

A collection of tools, scripts and personal research

mischosts

hosts for pihole

open-xp-rules

Открытый репозиторий с правилами на языке eXtraction and Processing (XP)

sharpnopsexec

Get file less command execution for lateral movement.

siem-content

sysmon-cheatsheet

All sysmon event types and their fields explained

sysmon-config

Sysmon configuration file template with default high-quality event tracing

sysmon-indepth

Understanding the operation and limitations of Sysmon's events

sysmoncommunityguide

TrustedSec Sysinternals Sysmon Community Guide

uac

UAC is a Live Response collection script for Incident Response that makes use of native binaries and tools to automate the collection of AIX, Android, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris systems artifacts.

windbg-cheat-sheet

My personal cheat sheet for using WinDbg for kernel debugging

windows-api-to-sysmon-events

A repository that maps API calls to Sysmon Event ID's.

windows-exploits

Windows 平台提权漏洞大合集，长期收集各种提权漏洞利用工具。 A large collection of rights raising vulnerabilities on the windows platform, which collects various rights raising vulnerability utilization tools for a long time.

windows-forensic-artifacts

List of windows forensic artifacts across version and interpretation tips with some examples. Work in progress!

winpwnage

UAC bypass, Elevate, Persistence methods