Add: mandiant/Mandiant-Azure-AD-Investigator to DFIR section

This commit is contained in:
pe3zx 2022-02-19 22:11:06 +07:00
parent 4746f1e29c
commit 5333f70f57

View File

@ -1685,6 +1685,10 @@ This repository is created as an online bookmark for useful links, resources and
<td><a href="https://github.com/MalwareSoup/MitreAttack">MalwareSoup/MitreAttack</a></td>
<td>Python wrapper for the Mitre ATT&CK framework API</td>
</tr>
<tr>
<td><a href="https://github.com/mandiant/Mandiant-Azure-AD-Investigator">mandiant/Mandiant-Azure-AD-Investigator</a></td>
<td>This repository contains a PowerShell module for detecting artifacts that may be indicators of UNC2452 and other threat actor activity</td>
</tr>
<tr>
<td><a href="https://github.com/markbaggett/srum-dump">markbaggett/srum-dump</a></td>
<td>A forensics tool to convert the data in the Windows srum (System Resource Usage Monitor) database to an xlsx spreadsheet.</td>