A practical guide to enhancing digital investigations with cutting-edge memory forensics techniques, covering fundamental concepts, tools, and techniques for memory forensics.
This project hosts scripts for aiding administrators in implementing Pass the Hash mitigations as outlined in the Reducing the Effectiveness of Pass the Hash paper. The PtHTools module contains the main commands for helping with implementing PtH mitigations: - Find-PotentialPtHEvents - Invoke-DenyNetworkAccess - Edit-AllLocalAccountPasswords - Get-LocalAccountSummaryOnDomain - Invoke-SmartcardHashRefresh - Find-OldSmartcardHash See the PtHTools readme file for more information on how to use them. Guidance: Reducing the Effectiveness of Pass the Hash Long-Lived Hashes for AD Smartcard Required Accounts Limit Workstation-to-Workstation Communication Microsoft guidance: https://aka.ms/pth - Microsoft's Pass-the-Hash general resource page. Mitigating Pass-the-Hash and Other Credential Theft v1 Mitigating Pass-the-Hash and Other Credential Theft v2 How Pass-the-Hash works Local Administrator Password Solution - LAPS is a Microsoft supported tool that ensures local administrator accounts do not all have the same password. It is an alternative to the Edit-AllLocalAccountPasswords command found in PtHTools. krbtgt refresh script - Resets the krbtgt account password twice to invalidate the hash.
A practical guide to enhancing digital investigations with cutting-edge memory forensics techniques, covering fundamental concepts, tools, and techniques for memory forensics.
A comprehensive guide to investigating security incidents in popular cloud platforms, covering essential tools, logs, and techniques for cloud investigation and incident response.
Enhance the security and privacy of Apple silicon Mac computers with incremental changes and user capability.
ENISA Training Resources offers online training material for cybersecurity specialists, covering technical areas such as artefact handling and analysis.
Boston Key Party CTF 2013 - cybersecurity competition with challenges in various domains.
A network of physical and online cyber warfare ranges for training and testing
