Posts Tagged ‘Digital Forensics’

iOSRestrictionBruteForce is written with Python. The tool can be used for cracking the restriction passcode of mobile Apple devices.

A member of GitHub ‘meirwah’ has shared the good list of incident response sources (such us: tools, books, videos, communities, etc.).

Mimikatz is a tool that implements the functionality of Windows Credentials Editor and allows you to get the authentication data of a logged-in user in the clear. The method used to detect Mimikatz is referred to as a grouping which consists of taking a group of unique artifacts and identifying. The author guides Cyberwardog to create alerts for detecting Mimikatz using Sysmon and ELK Stask in this article. It should be noted that you must already have ELK Stack installed with the ElastAlert setting. The script is needed to process some logic needed to test a couple of things before we can turn off the alert to get started.

This article is devoted to the tool that extracts various artifacts from the AD environment into a specially formatted Microsoft Excel. ADRecon can be ran from any workstation that is connected to the environment.