Pinned Repositories
analyzeMFT
Awesome-BEC
Repository of attack and defensive information for Business Email Compromise investigations
awesome-incident-response
A curated list of tools for incident response
create_for508_mounts
Create mount point directories for FOR508 exercises
elk-configurations
Store ELK and Timesketch customizations
ELK-SIEM
ElasticSIEM Deployment
for608-public
Various resources for SANS FOR608 class
mpilking's Repositories
mpilking/for608-public
Various resources for SANS FOR608 class
mpilking/awesome-incident-response
A curated list of tools for incident response
mpilking/elk-configurations
Store ELK and Timesketch customizations
mpilking/analyzeMFT
mpilking/Awesome-BEC
Repository of attack and defensive information for Business Email Compromise investigations
mpilking/create_for508_mounts
Create mount point directories for FOR508 exercises
mpilking/ELK-SIEM
ElasticSIEM Deployment
mpilking/evtx
C# based evtx parser with lots of extras
mpilking/Kansa
A Powershell incident response framework
mpilking/KAPE-EZToolsAncillaryUpdater
A script that updates KAPE (using Get-KAPEUpdate.ps1) as well as EZ Tools (within .\KAPE\Modules\bin) and the ancillary files that enhance the output of those tools
mpilking/KapeFiles
This repository serves as a place for community created Targets and Modules for use with KAPE.
mpilking/mkdocs-pdf-export-plugin
An MkDocs plugin to export content pages as PDF files
mpilking/mpilking.github.io
My GitHub Pages
mpilking/Public
Collection of scripts provided for public use
mpilking/Skadi
Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux
mpilking/sysmon-config
Sysmon configuration file template with default high-quality event tracing
mpilking/velociraptor
Digging Deeper....
mpilking/velociraptor-web
Velociraptor's documentation site.