kraken8585 Goto Github PK

get-zimmermantools

Get all my software

hawk

Powershell Based tool for gathering information related to O365 intrusions and potential Breaches

hayabusa-ir

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

incident-playbook

GOAL: Incident Response Playbooks Mapped to MITRE Attack Tactics and Techniques. [Contributors Friendly]

incident-response-plan-template

A concise, directive, specific, flexible, and free incident response plan template

incident-response-playbooks

ipsum

Daily feed of bad IPs (with blacklist hit scores)

irm

Incident Response Methodologies

irm-1

Incident Response Methodologies 2022

kapefiles

This repository serves as a place for community created Targets and Modules for use with KAPE.

kql

KQL queries for Advanced Hunting

kql-for-dfir

A guide to using Azure Data Explorer and KQL for DFIR

kraken8585

Config files for my GitHub profile.

kusto-queries

example queries for learning the kusto language

link_sanitizer

Python script to sanitize web links in reports and copies of evidence logs

live-forensicator

Powershell Script to aid Incidence Response and Live Forensics

liveresponse

M365 MDATP Live Response sample scripts

m365d-api

malwoverview

Malwoverview is a first response tool used for threat hunting and offers intel information from Virus Total, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, ThreatCrowd, Malware Bazaar, ThreatFox, Triage and it is able to scan Android devices against VT and HA.

mdatp

Microsoft 365 Defender - Resource Hub

mdatp-1

Microsoft Defender Advanced Threat Protection

microsoft-365-defender-hunting-queries

Sample queries for Advanced hunting in Microsoft 365 Defender

microsoft-defender-atp

microsoftdefenderforendpoint-api-powershell

This project contains samples how to use MDATP API for integration with other systems and products

microsoftdefenderforendpoint-api-python

sample code to MicrosoftDefenderATP API

microsoftdefenderforendpoint-powerbi

A repo for sample MDATP Power BI Templates

plaso

Super timeline all the things

powershell

A repository where I store some of my PowerShell snippets for public use.

powershell-1

powershell-scripts-1

Various PowerShell sripts I've written or composed over the years.