Discover olafhartong/Clear-dminline Open Source project

Stars
2
Language
Python
Created over 9 years ago
Updated over 9 years ago

olafhartong

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

After migrating a Cisco ASA config to a Palo Alto config you remain with all these horrible DMINLINE objects, this tool resolves all members and replaces the ogroup object by its members

sysmon-modular

A repository of sysmon configuration modules

PowerShell

2,381

ThreatHunting

A Splunk app mapped to MITRE ATT&CK to guide your threat hunts

1,090

sysmon-cheatsheet

All sysmon event types and their fields explained

507

ATTACKdatamap

A datasource assessment on an event level to show potential coverage or the MITRE ATT&CK framework

PowerShell

342

MDE-AuditCheck

MDE relies on some of the Audit settings to be enabled

PowerShell

Presentations

My conference presentations

detection-sources

DefenderHarvester

Expose a lot of MDE telemetry that is not easily accessible in any searchable form

TA-Sysmon-deploy

Deploy and maintain Symon through the Splunk Deployment Sever

Batchfile

WDACme

A WDAC configuration repository with the sole intention of enriching MDE

parsoalto

Palo Alto Networks Rule Parser

PHP

Sentinel-template-parser

Azure Sentinel Template parser

PowerShell

SA-Threat-Hunting

Splunk app for Threat hunting

sysmon-modular-linux

A repository of Sysmon For Linux configuration modules

sysmon-parser

Automatically generated Sysmon parser for Azure Sentinel

PowerShell

unfetter-discover

Unfetter-Discover Vagrant script for the Unfetter-Discover docker release

Shell

scripts

just random simple scripts

Shell

disposable-windows

A packer project to quickly have a test / dev / IR box

olafhartong

BHCEupload

A small go tool to upload JSON files to the BloodHound community edition API

olafhartong/Clear-dminline

olafhartong

Reviews

Repository Details

More Repositories