rhq
rhq copied to clipboard
Recon Hunt Queries
During various tests, it observed that the created pipe displayed the same pattern that can be detected by this regex: MSSE-[0-9]{4}-server Cobalt Strike users cannot change the default value of...
List all the disabled security products using Windows Security Center
Identifies default named pipes used by most popular post exploitation frameworks and sysadmin tools
Kolide retired their original Fleet repo years back, and has pulled source from the current commit of the repo due to vulnerabilities found since then. Revising the link here to...