Beast code in Giters

Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Personal, Enterprise, Government and Military security levels | Read The Rationale https://github.com/HotCakeX/Harden-Windows-Security/blob/main/Rationale.md

Language:PowerShellMIT1274 32 73

APT-Hunter

APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity

Language:PythonGPL-3.01183 48 24

untitledgoosetool

Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customer’s Azure Active Directory (AzureAD), Azure, and M365 environments.

Language:PythonCC0-1.0898 17 41

o365recon

retrieve information via O365 and AzureAD with a valid cred

Language:PowerShell664 19 4

Mandiant-Azure-AD-Investigator

Language:PowerShellApache-2.0607 33 13

onedrive_user_enum

onedrive user enumeration - pentest tool to enumerate valid o365 users

Language:PythonGPL-3.0560 12 3

EnableWindowsLogSettings

Documentation and scripts to properly enable Windows event logs.

Language:BatchfileGPL-3.0490 11 6

KQL

Threat Hunting query in Microsoft 365 Defender, XDR. Provide out-of-the-box KQL hunting queries - App, Email, Identity and Endpoint.

407 21 2

MAAD-AF

MAAD Attack Framework - An attack tool for simple, fast & effective security testing of M365 & Entra ID (Azure AD).

Language:PowerShellGPL-3.0336 13 4

LightsOut

Generate an obfuscated DLL that will disable AMSI & ETW

Language:PythonGPL-3.0308 6 1

steam-lancache-prefill

CLI tool to automatically prime a Lancache with Steam games

Language:C#MIT264 6 192

ScrapingKit

Scraping Kit is made up of several tools for scraping services for keywords, useful for initial enumeration of Domain Controllers or if you have popped a user's desktop and their outlook client.

Language:PowerShell94 80