Pinned Loading

1. Observe Observe Public

   Observe introduction: building a SIEM with Observe.

2. TTmapping TTmapping Public

   Mapping common adversarial TTP's against Detections & Atomics.

3. xql-generator xql-generator Public

   XQL query generator, for generating quick Hunting queries. Cortex XDR focussed. A github pages project.

   4

4. KQL KQL Public

   KQL detection query collection.

5. ADFS-Enum ADFS-Enum Public

   ADFS service provider (relying party) information enumerator

   PowerShell

6. lolbin-check lolbin-check Public

   Powershell script that checks if a list of executables contains potential living of the land binaries or scripts.

   PowerShell 1