Active_Directory_Advanced_Threat_Hunting
This repo is about Active Directory Advanced Threat Hunting
파일 탐색기
최종 버전 다운로드 (.zip)- README.md
- SO-Dashboard-Elastic.JPG
- SO-Dashboard.JPG
- SO-Winlogbeat.JPG
- SO-Winlogbeat_Config_Check.JPG
- SO-Winlogbeat_Config_OK.JPG
- SO-Winlogbeat_Service.JPG
- sysmon-config.xml
- winlogbeat.yml
- so_1.png
- so_10.png
- so_11.png
- so_11a.png
- so_12.png
- so_13.png
- so_14.png
- so_15.png
- so_2.png
- so_3.png
- so_4.png
- so_5.png
- so_6.png
- so_7.png
- so_8.png
- so_9.png
- Setup_advanced_monitoring.md
- .DS_Store
- aad_0.png
- aad_1.png
- aad_2.png
- aad_3.png
- aad_4.png
- aad_5.png
- aad_6.png
- sen_1.png
- sen_2.png
- sen_3.png
- sen_4.png
- sen_5.png
- wt_1.png
- wt_2.png
- wt_3.png
- wt_4.png
- Collect_information_and_hunting.md
- adrecon_1.png
- adrecon_10.png
- adrecon_11.png
- adrecon_12.png
- adrecon_13.png
- adrecon_14.png
- adrecon_15.png
- adrecon_2.png
- adrecon_3.png
- adrecon_4.png
- adrecon_5.png
- adrecon_6.png
- adrecon_7.png
- adrecon_8.png
- adrecon_9.png
- Azure_Arc.png
- Example_1.png
- Hunt_Query_1.png
- Hunt_Query_2.png
- Hunt_Query_3.png
- Hunt_Query_4.png
- .DS_Store
- Credential_Theft_and_Ransomware_Infection.md
- In-depth_investigation_active_directory.md
- Local_host_infection_and_malicious_behavior.md
- Operating_system_configuration_changes.md
- Create_a_gMSA.ps1
- Finding_outdated_software.ps1
- Finding_Unused_Group_Policy_Objects.ps1
- Generating_group_membership_report.ps1
- GPO_Permissions.ps1
- Group_Membership_Report.ps1
- Hunting_Account_Events.ps1
- Hunting_AdminSDHolder_SDProp.ps1
- Hunting_Domain_Information.ps1
- Hunting_Groupmembership.ps1
- Hunting_Objects_in_Active_Directory.ps1
- Hunting_User_Account_Password_Change_LockOut.ps1
- List_all_SPNs_used.ps1
- Password_Expiration.ps1
- README.md
- Resetting_Password_Unlocking_Accounts.ps1
- Search_AD_Permissions.ps1
- Search_Replicating_Directory_Changes_permission.ps1
- Search_stale_accounts.ps1
- Searching_for_misconfigured_permissions.ps1
- SID_History.ps1
- Tracking_the_Source_of_Account_Lock_Outs_and_Bad_Passwords.ps1
- TrustedforDelegation.ps1
- Users_without_Manager.ps1
- pol_0.png
- pol_1.png
- pol_2.png
- pol_3.png
- pol_4.png
- pol_5.png
- pol_6.png
- pol_7.png
- pol_8.png
- pol_9.png
- Analyze_group_policy_objects.md
- .DS_Store
- .gitignore
- 20230614145346_BloodHound.zip
- 20230615135413_BloodHound.zip
- 20230615141409_BloodHound.zip
- 20230615141922_BloodHound.zip
- 20230615142934_BloodHound.zip
- 20230617170902_BloodHound.zip
- 20250208163630_BloodHound.zip
- BloodHound.JPG
- BloodHound_and_SharpHound.txt
- Commands.sh
- Links.txt
- MITRE_ATT&CK_Techniques_Windows_Eventlog_IDs.md
- README.md
- WSL_Kali_Post_Installation.txt
- WSLg_and_Kali_Win-Kex.txt
// repository documentation
Was this content helpful?
(0 ratings)