Discover mazyaar/Windows_Forensic_Investigation_8

Stars
3
Rank 3,963,521 (Top 79 %)
Language
License
The Unlicense
Created about 1 year ago
Updated about 1 year ago

mazyaar

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

When conducting an investigation on a Windows machine there are 8 phase to go through, today we’ll discuss the first ‘Collecting Volatile Information’, and the rest will be explained in future topics

Sysmon_Utility_MITRE_ATTACK

Investigate Attack Patterns using SIEM, Sysmon Utility and MITRE ATT&CK

Pattern_Recognition

Use Histogram and Parzen Window to estimate Kenrnel Density Estimation and Plot Figure for Pattern Recognition

Python

wireshark_threat_hunting

Useful Wire shark command for threat hunting

DNS_Incident_Response

DNS Incident Response

Ubuntu_DNS_Server_Bind9

UBUNTU DNS SERVER WITH BIND9

Gre_Tunnel_bash

making a Tunnel between two VPS that one of which is in Iran and another VPS occur on a foreign country and send the traffics to a foreign data center and use free internet. with this bash script, you can make a tunnel between two servers

Shell

Postfix_Dovcout_Opendkim_Roundcube

Install and Configuration Webmail By Postfix Dovcout Opendkim Roundcube

make_valid_SSL_with_acme

make valid SSL with acme

Shell

IPv6_Tutorial

Lpic101_Note

Lpic101_Note for beginner

UBUNTU_NTP_SERVER

Ubuntu NTP Server Configurations

openssl_bashscript

Make CA root server and Certificate for web Server with openssl Script.

Shell

THREAT_HUNTING_PLAYBOOKS

Starting your first threat hunting

mazyaar/Windows_Forensic_Investigation_8_parts

mazyaar

Reviews

Repository Details

More Repositories