Eric Turpin

PSPy. AWS PowerShell Python Lambda, or PSPy for short, is a simple Python 2.7 AWS Lambda function designed to execute the PowerShell binary and marshal input/output to PowerShell.

PSRemotingConfigurations. A central place for me to share interesting PSRemoting configurations

TA_ETW. Splunk Technology Add-On (TA) for collecting ETW events from Windows systems

DuoPusher. Duo MFA auditing tool to test users' likelihood of approving unexpected push notifications

public-sublime-rules.

python-urlscan. Simple python class to interface with UrlScan.io

ApplicationWhitelistBypassTechniques. A Catalog of Application Whitelisting Bypass Techniques

sysmon-config. Sysmon configuration file template with default high-quality event tracing

windows-operating-system-archaeology. windows-operating-system-archaeology @Enigma0x3 @subTee

PowerForensics. PowerShell - Live disk forensics platform

DEFCON25_PS_Workshop. Materials of Workshop presented at DEFCON 25

atomic-red-team. Small and highly portable detection tests based on MITRE's ATT&CK.

FIR. Fast Incident Response