ADenum - A Pentesting Tool That Allows To Find Misconfiguration Through The The Protocol LDAP And Exploit Some Of Those Weaknesses With Kerberos

AD Enum is a pentesting tool that allows to find misconfiguration through the protocol LDAP and exploit some of those weaknesses with Kerberos. cracking john -jp path John binary path -w wordList The path of the wordlist to be used john Default:...

DetectionLabELK - A Fork From DetectionLab With ELK Stack Instead Of Splunk

DetectionLabELK is a fork from Chris Long's DetectionLab with ELK stack instead of Splunk. Description: DetectionLabELK is the perfect lab to use if you would like to build effective detection capabilities. It has been designed with defenders in mind. Its primary purpose is to allow blueteams to...

Description of Update 1 for Microsoft Advanced Threat Analytics v1.7

Describes the features and functionality of Update 1 for Microsoft Advanced Threat Analytics ATA v1.7.This article describes an update for Microsoft Advanced Threat Analytics ATA v1.7.DO NOT run the command in this article on the versions that are later than v1.7, as this damages the system. Also...

Advanced Threat Analytics プレイブックを使って攻撃をシミュレーションし検出する方法

本記事は、Microsoft Advanced Threat Analytics Team のブログ “How to simulate and detect attacks with the Advanced Threat Analytics Playbook” 2017 年 2 月 23...

Description of Update 1 for Microsoft Advanced Threat Analytics v1.6

Describes update 1 for Microsoft Advanced Threat Analytics ATA v1.6.SymptomsAfter you run Microsoft Advanced Threat Analytics ATA v1.6 for several weeks, the ATA console may display many unexpected suspicious activities of type "Suspicion of identity theft based on abnormal behavior". If...

Microsoft Advanced Threat Analytics

Product Family for Microsoft Advanced Threat Analytics...

Microsoft Advanced Threat Analytics 1.6 Update 1

Abnormal behavior algorithm false positive reduction. Center performance improvement...

Microsoft Advanced Threat Analytics 1.7 Update 1

Role based access control. Windows Server core support. Reconnaissance using Directory Services Enumeration detection. Pass-the-Ticket detections enhancements. Unusual Protocol Implementation detection enhancements...