toddmaxey Goto Github PK

.net-crypto-settings

.Net v2 and v4 by default will not enforce strong crypto or use the machine TLS setting. Registry setting to correct this issue

adfs-tls-bindings

Script to remote and add the TLS bindings for an ADFS or WAP server

azure-docs

Open source documentation of Microsoft Azure

cc

cve-2023-36884

PowerShell Script for initial mitigation of vulnerability

cyberchef

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

ericzimmerman.github.io

Software downloads

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

ir-links

These are IR related links

ja3

A wireshark/tshark plugin for the JA3 TLS Client Fingerprinting Algorithm

measure-ntfs-usn-consumption

Powershell script to query the NTFS USN journal to determine if you have a high USN consumption rate.

mha

Message Header Analyzer Add-in For Outlook

microsoft-cipher-suite-list-generator

An Excel spreadsheet that will allow you to generate an ordered list of cipher suites suitable for use in SSL Configuration Settings/SSL Cipher Suite Order policy (Local or GPO)

microsoft-graph-docs

Documentation for the Microsoft Graph REST API

network_capture

Original code by Lex Thomas and Keith Ramphal. Modified by Todd Maxey and Muath Deeb. Take a network packet capture using PowerShell.

office-docs-powershell

PowerShell Reference for Office Products - Short URL: aka.ms/office-powershell

patoolkit

PA Toolkit is a collection of traffic analysis plugins focused on security

pingcastle

PingCastle - Get Active Directory Security at 80% in 20% of the time

proxy-settings

A cobbled PowerShell script to display the various WinInet and WinHTTP proxy settings on a machine and for the user that is running the script

research

schannel-settings

Secure Cipher Suites allowed, ordering for TLS 1.2, 1.3 with general Schannel security guidance for Windows 1x, Server 2022

settings-for-tls-and-.net-to-enforce-strong-crypto

Registry settings for TLS and .Net to enforce strong crypto and increase Schannel logging to include Warnings and Errors

smokelesscpu-guides

Guides left to us by the legendary SmokelessCPU before he decided to drop off the internet

supportarticles-docs

A public version to sync with SupportArticles-docs-pr

tls-alert-codes

Chart of TLS Alert codes culled from the internet

toddmaxey.github.io

win32

Public mirror for win32-pr

windows-defender-application-control-hardening

Harden Windows with Windows Defender Application Control (WDAC)

windows-defender-hardening

Take advantage of some more advanced Windows Defender settings.

windows-path-enumerate

Script for fix Windows path enumerate vulnerability