wef

Tools to create a Native Windows Audit Collection Platform. Active Directory example provided

Real time peer to peer RTS game running on WebGL (WIP).

Repository with Sample threat hunting notebooks on Security Event Log Data Sources

This repository contains a collection of PowerShell tools that can be utilized to protect and defend an environment based on the recommendations of multiple cyber security researchers at Microsoft. These tools were created with a small to medium size enterprise environment in mind as smaller organizations do not always have the type of funding available to overly spend on security. The goal of this project is to help add value to an smaller organizations security by creating more visibility for the average IT Administrator. Organizations with 1,000’s of devices may find that this entire suite does not apply to them.

WEF is based on the c # data entity framework supports MSQSqlServer, MySql, Orcalce,Postgre etc of conventional database and fast development, which integrates a large amount of data set under the development experience of tools, such as the Lambada without SQL query expression, add and delete, entity cloning, bulk and the parameters of the table, transaction, round of entities or stored procedures, SQL entities, etc.

PowerShell scripts for fast Windows Event Collector configuration with Palantir toolset

An open-source log collector for collecting logs from Windows Event Forwarding

Ansible role for deploying WEFC subscriptions.

Powershell module for Windows Event Forwarding management.

Scripts to automate the setup and configuration of windows event collector.

Winlogbeat installation for Windows Event Collectors (WEFCs)

Ansible automation for Domain Controller, CA, WEF and Syslog

Auxiliary materials for IWS talk