needamulligan Goto Github PK

applocker-guidance

Configuration guidance for implementing application whitelisting with AppLocker. #nsacyber

automate-scripts

Scripts for ConnectWise Automate

bitlocker-guidance

Configuration guidance for implementing BitLocker. #nsacyber

blue-team-wiki

Tools, techniques, cheat sheets, and other resources to assist those defending organizations and detecting adversaries

ctf-tools

Some setup scripts for security research tools.

cyber-challenge

Supporting files for cyber challenge exercises. #nsacyber

deepbluecli

free_cybersecurity_professional_development_resources

An awesome list of FREE resources for training, conferences, speaking, labs, reading, etc that are free. Originally built during COVID-19 for cybersecurity professionals with downtime can take advantage of to improve their skills and marketability to come out on the other side ready to rock. Now its taken on a life of its own and will persist, COVID be damned.

havoc

The Havoc Framework.

hollows_hunter

Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).

locklevel

A prototype that demonstrates a method for scoring how well Windows systems have implemented some of the top 10 Information Assurance mitigation strategies. #nsacyber

mitigating-obsolete-tls

Guidance for mitigating obsolete Transport Layer Security configurations. #nsacyber

mitigating-web-shells

Guidance for mitigation web shells. #nsacyber

o365-investigationtooling

office-docs-powershell

PowerShell Reference for Office Products - Short URL: aka.ms/office-powershell

office365itpros

Office 365 for IT Pros PowerShell examples

pass-the-hash-guidance

Configuration guidance for implementing Pass-the-Hash mitigations. #nsacyber

persistencesniper

Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines.

unfetter

Identifies defensive gaps in security posture by leveraging Mitre's ATT&CK framework. #nsacyber

windows-event-log-messages

Retrieves the definitions of Windows Event Log messages embedded in Windows binaries and provides them in discoverable formats. #nsacyber

windows-harden-kitty

Windows Hardening settings and configurations

windows10debloater

Script to remove Windows 10 bloatware.