Security Hardening: Check if Sysmon is installed and running
f50d3fee-c961-4fab-bc51-54a0fed6b59f
Threat Intel: Attack Vector: Credential dumping protections using LSA Protection
368b50e1-18bd-4cc8-a296-b42030468dbe
Threat Intel: Attack Vector: Disable WinRM (Windows Remote Management)
1c1e3c39-98a3-41cb-8bf1-1a5f36a6c950
Threat Intel: Attack Vector: Disable Windows Event Logging
f1bc38dc-fbda-45cd-9ec9-7f69dfd7b00e
Threat Intel: Attack Vector: Preventing Unauthorized Application Execution
28c9bd0b-46c9-4740-aa57-88705ff28fb1
Threat Intel: Attack Vector: Windows downgrade attacks
87e9a8db-ba56-4e89-829f-ecc5fc01f848
Threat Intel: Confluence Security Advisory 2022-06-02 - CVE-2022-26134 - Critical
bb2c81d6-c405-4581-8bd0-9dbb37d5b8d7
Threat Intel: Log4j Remote Code Execution - CVE-2021-44228/CVE-2021-45046
a01ac7ca-b4f4-44e2-badd-dd7eb11e765d
Threat Intel: Microsoft Support Diagnostic Tool Vulnerability CVE-2022-30190
6644dbf9-c673-4ab9-8c1d-6781bac0659d
Threat Intel: Persistence - AppInit DLLs
bf92b536-95cc-4060-bea3-a61ba1e4c9bb
Threat Intel: PetitPotam Certificate Enrollment Web Service on Domain Controller
e1e6e9f0-1825-4f22-ab9a-f1a238843c01
Threat Intel: PetitPotam NTLM Relay Attack: Disable NTLM Incoming Traffic on DCs
744b05b3-e1aa-47d0-b4ca-0d327bd6ab3d