ares-92310's repositories
AD-Attack-Defense
Attack and defend active directory using modern post exploitation adversary tradecraft activity
AnalyseLog
Automatisation for analyse logs
awesome-pentest-cheat-sheets
Collection of the cheat sheets useful for pentesting
Bash-Oneliner
A collection of handy Bash One-Liners and terminal tricks for data processing and Linux system maintenance.
BlueTeam-Tools
Tools and Techniques for Blue Team / Incident Response
Community
Welcome to the SEKOIA.IO Community repository!
Cortex_XDR_XQL_Queries
Queries for Cortex XDR
CSS-Exchange
Exchange Server support tools and scripts
cURL_for_OSINT
cURL Tool Usage for OSINT (Open-Source Intelligence)
DFIR4vSphere
Powershell module for VMWare vSphere forensics
EVTX-ATTACK-SAMPLES
Windows Events Attack Samples
exploitation-course
Offensive Software Exploitation Course
Get-bADpasswords
Get insights into the actual strength and quality of passwords in Active Directory.
Hunting-Queries-Detection-Rules
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
IOCs
Indicators of Compromise
iocs-Unit42
Indicators from Unit 42 Public Reports
KQL
Threat Hunting query in Microsoft 365 Defender, XDR. Provide out-of-the-box KQL hunting queries - App, Email, Identity and Endpoint.
learn-regex
Learn regex the easy way
LinikatzV2
linikatz is a tool to attack AD on UNIX
LogonTracer
Investigate malicious Windows logon by visualizing and analyzing Windows event log
malware-ioc
Indicators of Compromises (IOC) of our various investigations
MustLearnKQL
Code included as part of the MustLearnKQL blog series
PersistenceSniper
Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Made with ❤️ by @last0x00 and @dottor_morte
PowerShell-WindowsAdmin
A collection of scripts I've created over the years to administer things.
theHarvester
E-mails, subdomains and names Harvester - OSINT
velociraptor-docs
Documentation site for Velociraptor
WatchAD
AD Security Intrusion Detection System
wifite2
Rewrite of the popular wireless network auditor, "wifite" - original source by @derv82 right over at
XDR_scripts
A few XDR Scripts