Pinned

1. briandelmsft/SentinelAutomationModules briandelmsft/SentinelAutomationModules Public

   The Microsoft Sentinel Triage AssistanT (STAT) enables easy to create incident triage automation in Microsoft Sentinel

   PowerShell 196 54

2. CanadianShield/ADFSLogs CanadianShield/ADFSLogs Public

   This repo lists examples of events generated during specific logon scenarios with ADFS.

3. CanadianShield/Spoors CanadianShield/Spoors Public

   Spoors is a local training initiative. The idea is to uncover the traces, audit logs and some of the OS artifacts left behind during internal sessions for which summaries are publicly shared here.

4. SecurityNotifications SecurityNotifications Public

   Send security notifications to your users when something important happened on their accounts (such as new MFA methods, atypical travels, TAP usage...).

   PowerShell 6 2

5. clipin clipin Public

   📎 Proof of concept to copy files over RDP connections

   PowerShell

6. AS_Ping AS_Ping Public

   PowerShell script to detect if an account has an AES key available for Kerberos Pre-Authentication.

   PowerShell 1