Michael Haag
Michael Haag
sysmon-dfir
Sources, configuration and how to detect evil things utilizing Microsoft Sysmon.
hunt-detect-prevent
Lists of sources and utilities utilized to hunt, detect and prevent evildoers.
app_splunk_sysmon_hunter
Splunk App to assist Sysmon Threat Hunting
CBR-Queries
Collection of useful, up to date, Carbon Black Response Queries
ASRGEN
ASR Configurator, Essentials and Atomic Testing