Your projects are multi-language. So is SonarQube analysis. Find Bugs, Vulnerabilities, Security Hotspots, and Code Smells so you can release quality code every time. Get started analyzing your projects today for free. Learn more →
Top 4 PowerShell threat-hunting Projects
A repository of sysmon configuration modulesProject mention: Is Windows Defender for Business any good? | reddit.com/r/cybersecurity | 2022-11-09
Agree. Harden your endpoints (if unsure where to start consider hardening kitty, https://github.com/scipag/HardeningKitty) and harden Defender (https://0ut3r.space/2022/03/06/windows-defender/). Add Sysmon with a good config (https://github.com/olafhartong/sysmon-modular) and you've reached a good starting point.
A Cloud Forensics Powershell module to run threat hunting playbooks on data from Azure and O365
Truly a developer’s best friend. Scout APM is great for developers who want to find and fix performance issues in their applications. With Scout, we'll take care of the bugs so you can focus on building great things 🚀.
DetectionLabELK is a fork from DetectionLab with ELK stack instead of Splunk.Project mention: Work setup | reddit.com/r/pop_os | 2022-08-27
Detection Lab ELK: https://github.com/cyberdefenders/DetectionLabELK
Automation scripts to deploy Windows Event Forwarding, Sysmon, and custom audit policies in an Active Directory environment.Project mention: EventLogging - Automation scripts to deploy Windows Event Forwarding, Sysmon, and custom audit policies in an Active Directory environment | reddit.com/r/purpleteamsec | 2022-10-26
PowerShell threat-hunting related posts
Is Windows Defender for Business any good?
2 projects | reddit.com/r/cybersecurity | 9 Nov 2022
splunk sysmon events
2 projects | reddit.com/r/Splunk | 2 Apr 2022
Best monitoring software that works like event logs?
2 projects | reddit.com/r/sysadmin | 21 Feb 2022
Hosts making DNS queries to malicious site. How to dig deeper and find source?
2 projects | reddit.com/r/AskNetsec | 9 Feb 2022
This Visual Studio Code extension is for heping in the writting of Sysmon XML configuration files - now supports Sysmon for Linux schema
3 projects | reddit.com/r/blueteamsec | 17 Oct 2021
GitHub - olafhartong/sysmon-modular: A repository of sysmon configuration modules
1 project | reddit.com/r/bag_o_news | 6 Aug 2021
A Sysmon configuration repository for everybody to customise
1 project | reddit.com/r/blueteamsec | 22 May 2021
A note from our sponsor - SonarQube
www.sonarqube.org | 3 Dec 2022
What are some of the best open-source threat-hunting projects in PowerShell? This list will help you: