Security Hardening: Check if Sysmon is installed and running
f50d3fee-c961-4fab-bc51-54a0fed6b59f
Threat Intel: Attack Vector: Credential dumping protections using LSA Protection
368b50e1-18bd-4cc8-a296-b42030468dbe
Threat Intel: Attack Vector: Disable LLMNR
3724e477-bdea-4a74-96b7-7ac79e157087
Threat Intel: Attack Vector: Disable WinRM (Windows Remote Management)
1c1e3c39-98a3-41cb-8bf1-1a5f36a6c950
Threat Intel: Attack Vector: Disable Windows Event Logging
f1bc38dc-fbda-45cd-9ec9-7f69dfd7b00e
Threat Intel: Attack Vector: Preventing Unauthorized Application Execution
28c9bd0b-46c9-4740-aa57-88705ff28fb1
Threat Intel: Attack Vector: Windows downgrade attacks
87e9a8db-ba56-4e89-829f-ecc5fc01f848
Threat Intel: Log4j Remote Code Execution - CVE-2021-44228/CVE-2021-45046
a01ac7ca-b4f4-44e2-badd-dd7eb11e765d
Threat Intel: Microsoft Support Diagnostic Tool Vulnerability CVE-2022-30190
6644dbf9-c673-4ab9-8c1d-6781bac0659d
Threat Intel: Persistence - AppInit DLLs
bf92b536-95cc-4060-bea3-a61ba1e4c9bb