Canadian Shield

Pinned Loading

1. ADFSLogs ADFSLogs Public

   This repo lists examples of events generated during specific logon scenarios with ADFS.

   1

2. ManageTravelers ManageTravelers Public

   You wonder how to manage your travelers ? In this scenario we describe how to manage them with Identity Governance and Conditional Access.

   11 2

3. ExportTableHistory ExportTableHistory Public

   PoC to extract the history of a table in Log Analytics and store the output in blob container.

   PowerShell

4. ASIM ASIM Public

   A step by step to write your own ASIM parser.

   3

5. SAMRTraces SAMRTraces Public

   List of SAM-R traces for common SAM-R operations. This is meant to help security analysts understand network traces containing this protocol.

6. Spoors Spoors Public

   Spoors is a local training initiative. The idea is to uncover the traces, audit logs and some of the OS artifacts left behind during internal sessions for which summaries are publicly shared here.

   1