Pinned Loading

1. Office 365 security baseline and inc... Office 365 security baseline and incident response

   1

   # O365 security baseline and incident response

   2

   3

   [Basics and Tools](https://gist.github.com/robert-moses/f2a27d75779d1cfc4759b7bf75940520#basics)

   4

   5

   [Email Incident Response steps](https://gist.github.com/robert-moses/f2a27d75779d1cfc4759b7bf75940520#office365-how-to-investigate-email-account-comprimise-or-suspicions-messages)

2. IR-Procedures IR-Procedures Public

   IR Procedures Workspace

3. nmap recon scanning nmap recon scanning

   1

   # scan and get all output file formats

   2

   nmap –sT –oA Network_Topology –vv 192.168.0.0/24

   3

   #

   4

   # pull the "alive" host IPs from the output

   5

   grep open Network_Topology.gnmap | cut -d" " -f2 > Device_List.txt

4. sysmon-config sysmon-config Public

   Forked from ion-storm/sysmon-config

   Advanced Sysmon configuration, Installer & Auto Updater with high-quality event tracing

   Batchfile 1