Chris Long 
							
						 
					 
					
						
						
							
						
						e3e2a02a91 
					 
					
						
						
							
							Try more ways to kill defender on Win10  
						
						
						
						
					 
					
						2021-03-24 20:36:58 -07:00 
						 
				 
			
				
					
						
							
							
								Chris Long 
							
						 
					 
					
						
						
							
						
						4a8781f698 
					 
					
						
						
							
							Small fixes for azure  
						
						
						
						
					 
					
						2021-03-13 21:41:20 -08:00 
						 
				 
			
				
					
						
							
							
								Chris Long 
							
						 
					 
					
						
						
							
						
						4bde98ff08 
					 
					
						
						
							
							Adding Exchange for Azure and ESXi  
						
						
						
						
					 
					
						2021-03-13 20:12:24 -08:00 
						 
				 
			
				
					
						
							
							
								Chris Long 
							
						 
					 
					
						
						
							
						
						3ac2b21ccc 
					 
					
						
						
							
							Update ThreatHunting, Add Exchange install script  
						
						
						
						
					 
					
						2021-03-08 09:49:10 -08:00 
						 
				 
			
				
					
						
							
							
								Chris Long 
							
						 
					 
					
						
						
							
						
						606dfe166f 
					 
					
						
						
							
							Add Process Hacker to utilities download  
						
						
						
						
					 
					
						2021-02-26 13:33:37 -08:00 
						 
				 
			
				
					
						
							
							
								Chris Long 
							
						 
					 
					
						
						
							
						
						c681c30449 
					 
					
						
						
							
							Add HTTP failover for autorunstowineventlog  
						
						
						
						
					 
					
						2021-01-26 14:25:23 -08:00 
						 
				 
			
				
					
						
							
							
								Chris Long 
							
						 
					 
					
						
						
							
						
						59119e0ae4 
					 
					
						
						
							
							Update install-utilities.ps1  
						
						
						
						
					 
					
						2021-01-21 12:54:01 -08:00 
						 
				 
			
				
					
						
							
							
								Chris Long 
							
						 
					 
					
						
						
							
						
						106a0a6805 
					 
					
						
						
							
							Disable googlechrome installation (temporary)  
						
						
						
						
					 
					
						2021-01-20 18:45:30 -08:00 
						 
				 
			
				
					
						
							
							
								Chris Long 
							
						 
					 
					
						
						
							
						
						77b484b0ec 
					 
					
						
						
							
							Actually adding the parameter  
						
						
						
						
					 
					
						2021-01-20 14:57:37 -08:00 
						 
				 
			
				
					
						
							
							
								Chris Long 
							
						 
					 
					
						
						
							
						
						6c5cd3e137 
					 
					
						
						
							
							Update install-utilities.ps1  
						
						... 
						
						
						
						Don't check checksums for GoogleChrome choco package 
						
						
					 
					
						2021-01-20 14:23:44 -08:00 
						 
				 
			
				
					
						
							
							
								Chris Long 
							
						 
					 
					
						
						
							
						
						cad9c0e553 
					 
					
						
						
							
							Verify explorer.exe is running it before stopping it  
						
						... 
						
						
						
						Issue #578  
						
						
					 
					
						2020-12-20 20:35:04 -08:00 
						 
				 
			
				
					
						
							
							
								Chris Long 
							
						 
					 
					
						
						
							
						
						ec57ad4fb9 
					 
					
						
						
							
							Implement taskbar layout GPO  
						
						
						
						
					 
					
						2020-12-17 17:14:22 -08:00 
						 
				 
			
				
					
						
							
							
								Chris Long 
							
						 
					 
					
						
						
							
						
						5b7dab7a43 
					 
					
						
						
							
							I need more coffee  
						
						
						
						
					 
					
						2020-12-17 14:31:30 -08:00 
						 
				 
			
				
					
						
							
							
								Chris Long 
							
						 
					 
					
						
						
							
						
						081a7f6812 
					 
					
						
						
							
							Fix typo  
						
						
						
						
					 
					
						2020-12-17 14:29:35 -08:00 
						 
				 
			
				
					
						
							
							
								Chris Long 
							
						 
					 
					
						
						
							
						
						7cc0bc79fd 
					 
					
						
						
							
							HTTP failover for live.sysinternals.com  
						
						... 
						
						
						
						https://twitter.com/Centurion/status/1339676252047724545  
					
						2020-12-17 13:06:11 -08:00 
						 
				 
			
				
					
						
							
							
								Chris Long 
							
						 
					 
					
						
						
							
						
						a9e3b3d5de 
					 
					
						
						
							
							Update Defender GPO, Update Splunk UF  
						
						
						
						
					 
					
						2020-12-05 09:16:42 -08:00 
						 
				 
			
				
					
						
							
							
								Chris Long 
							
						 
					 
					
						
						
							
						
						1a47c92d90 
					 
					
						
						
							
							Update bootstrap.sh with fleet fixes, remove duplicate registry key code  
						
						
						
						
					 
					
						2020-11-16 16:51:23 -08:00 
						 
				 
			
				
					
						
							
							
								Chris Long 
							
						 
					 
					
						
						
							
						
						aa787f22c0 
					 
					
						
						
							
							Update install-evtx-attack-samples.ps1  
						
						
						
						
					 
					
						2020-11-14 23:39:36 -08:00 
						 
				 
			
				
					
						
							
							
								Chris Long 
							
						 
					 
					
						
						
							
						
						3fb36effed 
					 
					
						
						
							
							Use /usr/bin/env bash instead of /bin/bash for scripts  
						
						
						
						
					 
					
						2020-11-05 22:32:03 -08:00 
						 
				 
			
				
					
						
							
							
								Chris Long 
							
						 
					 
					
						
						
							
						
						023b9acd8d 
					 
					
						
						
							
							Fix typo  
						
						
						
						
					 
					
						2020-10-16 15:31:11 -07:00 
						 
				 
			
				
					
						
							
							
								Chris Long 
							
						 
					 
					
						
						
							
						
						51b6599c39 
					 
					
						
						
							
							Add WINS server config  
						
						
						
						
					 
					
						2020-10-15 18:52:49 -07:00 
						 
				 
			
				
					
						
							
							
								Chris Long 
							
						 
					 
					
						
						
							
						
						aef71a10d1 
					 
					
						
						
							
							Attempt to fix issue 517  
						
						
						
						
					 
					
						2020-10-14 23:04:53 -07:00 
						 
				 
			
				
					
						
							
							
								Arioch 
							
						 
					 
					
						
						
							
						
						e2d9879344 
					 
					
						
						
							
							Merge branch 'master' into update_gpo_rdp  
						
						
						
						
					 
					
						2020-10-01 09:14:24 +02:00 
						 
				 
			
				
					
						
							
							
								Chris Long 
							
						 
					 
					
						
						
							
						
						ff3e595235 
					 
					
						
						
							
							Adding ATA to Packer image, adding evtx-attack-samples  
						
						
						
						
					 
					
						2020-09-29 17:36:32 -07:00 
						 
				 
			
				
					
						
							
							
								ZeArioch 
							
						 
					 
					
						
						
							
						
						c80063c4b3 
					 
					
						
						
							
							add migration table target to RDP GPO import script  
						
						
						
						
					 
					
						2020-09-28 15:55:41 +02:00 
						 
				 
			
				
					
						
							
							
								Chris Long 
							
						 
					 
					
						
						
							
						
						aa51e77663 
					 
					
						
						
							
							nits  
						
						
						
						
					 
					
						2020-09-23 23:58:06 -07:00 
						 
				 
			
				
					
						
							
							
								p-zim 
							
						 
					 
					
						
						
							
						
						ccb39ea145 
					 
					
						
						
							
							Update install-redteam.ps1  
						
						... 
						
						
						
						PurpleSharp part throws an error and Vagrant stops since the script did not check if the PurpleSharp folder was already existing when for example re-running "vagrant reload dc --provision" 
						
						
					 
					
						2020-09-24 00:05:37 +02:00 
						 
				 
			
				
					
						
							
							
								Chris Long 
							
						 
					 
					
						
						
							
						
						7c539edcc7 
					 
					
						
						
							
							Update provision.ps1  
						
						
						
						
					 
					
						2020-09-20 21:13:50 -07:00 
						 
				 
			
				
					
						
							
							
								Chris Long 
							
						 
					 
					
						
						
							
						
						59374ca601 
					 
					
						
						
							
							Merge branch 'master' into add-hyperv  
						
						
						
						
					 
					
						2020-08-28 14:21:52 -07:00 
						 
				 
			
				
					
						
							
							
								Chris Long 
							
						 
					 
					
						
						
							
						
						bee5d4ce1b 
					 
					
						
						
							
							Replace build scripts with prepare scripts  
						
						
						
						
					 
					
						2020-08-27 18:14:41 -07:00 
						 
				 
			
				
					
						
							
							
								man715 
							
						 
					 
					
						
						
							
						
						85a5990b2f 
					 
					
						
						
							
							Copy the Splunk app to the temp directory of the VM before installing.  
						
						
						
						
					 
					
						2020-08-25 13:01:39 -07:00 
						 
				 
			
				
					
						
							
							
								Chris Long 
							
						 
					 
					
						
						
							
						
						4ed4d9ed4a 
					 
					
						
						
							
							Update detectionlab.com endpoint  
						
						
						
						
					 
					
						2020-08-15 23:29:04 -07:00 
						 
				 
			
				
					
						
							
							
								Chris Long 
							
						 
					 
					
						
						
							
						
						25e8ce0b22 
					 
					
						
						
							
							Whitespace  
						
						
						
						
					 
					
						2020-08-14 01:36:10 -07:00 
						 
				 
			
				
					
						
							
							
								Chris Long 
							
						 
					 
					
						
						
							
						
						1c35d1b39e 
					 
					
						
						
							
							Reverting the UF update  
						
						
						
						
					 
					
						2020-08-14 01:35:46 -07:00 
						 
				 
			
				
					
						
							
							
								Chris Long 
							
						 
					 
					
						
						
							
						
						97c98f332b 
					 
					
						
						
							
							Update install-splunkuf.ps1  
						
						
						
						
					 
					
						2020-08-12 20:27:38 -07:00 
						 
				 
			
				
					
						
							
							
								Chris Long 
							
						 
					 
					
						
						
							
						
						d1f78d153f 
					 
					
						
						
							
							Update the Splunk UF  
						
						
						
						
					 
					
						2020-08-12 20:27:26 -07:00 
						 
				 
			
				
					
						
							
							
								Chris Long 
							
						 
					 
					
						
						
							
						
						ec4c5d1483 
					 
					
						
						
							
							Remove inputsconf  
						
						
						
						
					 
					
						2020-08-05 13:38:46 -07:00 
						 
				 
			
				
					
						
							
							
								Chris Long 
							
						 
					 
					
						
						
							
						
						165ba4ae41 
					 
					
						
						
							
							Fixing fix-second-network.ps1  
						
						
						
						
					 
					
						2020-08-05 00:28:30 -07:00 
						 
				 
			
				
					
						
							
							
								Chris Long 
							
						 
					 
					
						
						
							
						
						84c29f6739 
					 
					
						
						
							
							Fix sysmon sourcetype, update ThreatHunting app  
						
						
						
						
					 
					
						2020-08-04 21:58:18 -07:00 
						 
				 
			
				
					
						
							
							
								Chris Long 
							
						 
					 
					
						
						
							
						
						4a26eb6cf9 
					 
					
						
						
							
							Update install-microsoft-ata.ps1  
						
						
						
						
					 
					
						2020-08-02 19:49:27 -07:00 
						 
				 
			
				
					
						
							
							
								Chris Long 
							
						 
					 
					
						
						
							
						
						9085136f17 
					 
					
						
						
							
							Insert hardcoded Velociraptor URL  
						
						... 
						
						
						
						Workaround for issue #497  
						
						
					 
					
						2020-08-02 15:26:52 -07:00 
						 
				 
			
				
					
						
							
							
								Chris Long 
							
						 
					 
					
						
						
							
						
						fcb8001bbe 
					 
					
						
						
							
							ESXi fixes  
						
						
						
						
					 
					
						2020-07-27 22:19:10 -07:00 
						 
				 
			
				
					
						
							
							
								Chris Long 
							
						 
					 
					
						
						
							
						
						bf2b89275e 
					 
					
						
						
							
							Fixing Microsoft ATA on Azure  
						
						
						
						
					 
					
						2020-07-20 17:19:17 -07:00 
						 
				 
			
				
					
						
							
							
								Chris Long 
							
						 
					 
					
						
						
							
						
						230e4ee882 
					 
					
						
						
							
							Fixing dumb mistakes  
						
						
						
						
					 
					
						2020-07-04 15:14:01 -07:00 
						 
				 
			
				
					
						
							
							
								Chris Long 
							
						 
					 
					
						
						
							
						
						8cc591b7d7 
					 
					
						
						
							
							Add velociraptor  
						
						
						
						
					 
					
						2020-07-03 01:55:19 -07:00 
						 
				 
			
				
					
						
							
							
								Chris Long 
							
						 
					 
					
						
						
							
						
						5c22a8a2a4 
					 
					
						
						
							
							Update fix-windows-expiration.ps1  
						
						
						
						
					 
					
						2020-06-25 17:39:13 -07:00 
						 
				 
			
				
					
						
							
							
								Ahmed Shawky 
							
						 
					 
					
						
						
							
						
						54a84b8640 
					 
					
						
						
							
							Make sure WinDefend service is not running when uninstalling Windows-Defender and Windows-Defender-Features features.  
						
						
						
						
					 
					
						2020-06-25 04:22:55 +04:00 
						 
				 
			
				
					
						
							
							
								Chris Long 
							
						 
					 
					
						
						
							
						
						ab5c0b2452 
					 
					
						
						
							
							Standardize logging  
						
						
						
						
					 
					
						2020-06-21 12:28:44 -07:00 
						 
				 
			
				
					
						
							
							
								Chris Long 
							
						 
					 
					
						
						
							
						
						c735f52934 
					 
					
						
						
							
							Fixing the loop logic  
						
						
						
						
					 
					
						2020-06-21 11:49:18 -07:00 
						 
				 
			
				
					
						
							
							
								Chris Long 
							
						 
					 
					
						
						
							
						
						ded6656cb7 
					 
					
						
						
							
							Update operator  
						
						
						
						
					 
					
						2020-06-21 09:16:50 -07:00