Blue

Welcome to the Blue repo!

This is a collection of content for blue team professionals, designed to support both reactive and proactive cybersecurity measures of every aspect.

Capabilities

This content facilitates:

Data Collection : Automate data gathering for swift incident responses and proactive measures.
Forensic Analysis : Perform deeper system analysis to uncover data after incidents.
Operational Efficiency : Enhance and simplify various cybersecurity operations.

Name		Name	Last commit message	Last commit date
Latest commit History 158 Commits
images		images
Active_Directory_Delegations.ps1		Active_Directory_Delegations.ps1
All_Executables.ps1		All_Executables.ps1
Allowed_Cached_Logon_Count.ps1		Allowed_Cached_Logon_Count.ps1
Alternate_Data_Streams.ps1		Alternate_Data_Streams.ps1
AppInit_DLLs.ps1		AppInit_DLLs.ps1
AutoStart_Run_Registries_All_Users.ps1		AutoStart_Run_Registries_All_Users.ps1
Browsing_Cookies_All_Users.ps1		Browsing_Cookies_All_Users.ps1
Browsing_History_All_Users.ps1		Browsing_History_All_Users.ps1
Capture_Screenshot_All_Users.ps1		Capture_Screenshot_All_Users.ps1
Clipboard_Contents_All_Users.ps1		Clipboard_Contents_All_Users.ps1
Cmdkey_List_All_Users.ps1		Cmdkey_List_All_Users.ps1
Current_Session_Powershell_History.ps1		Current_Session_Powershell_History.ps1
DNS_Client_Cache.ps1		DNS_Client_Cache.ps1
Documents_Users_Trusted_and_Enabled.ps1		Documents_Users_Trusted_and_Enabled.ps1
Domain_Controller_Details.ps1		Domain_Controller_Details.ps1
Download_Folder_Files_All_Users.ps1		Download_Folder_Files_All_Users.ps1
Estimated_High_Entropy_Files.ps1		Estimated_High_Entropy_Files.ps1
Etc_Hosts_File_Entries.ps1		Etc_Hosts_File_Entries.ps1
Files_With_RTLO_Character.ps1		Files_With_RTLO_Character.ps1
Firewall_Rules.ps1		Firewall_Rules.ps1
Follow_URL_Redirections.ps1		Follow_URL_Redirections.ps1
Hash_Hunter.ps1		Hash_Hunter.ps1
High_Entropy_File_Names.ps1		High_Entropy_File_Names.ps1
Historical_WiFi_Connections.ps1		Historical_WiFi_Connections.ps1
Installed_Applications.ps1		Installed_Applications.ps1
Interface_DNS_Priorities.ps1		Interface_DNS_Priorities.ps1
Internet_Downloaded_Files.ps1		Internet_Downloaded_Files.ps1
LICENSE		LICENSE
Last_Registry_Key_Accessed_All_Users.ps1		Last_Registry_Key_Accessed_All_Users.ps1
Loaded_Process_Modules.ps1		Loaded_Process_Modules.ps1
Local_Logging_Audit_Policy_Settings.ps1		Local_Logging_Audit_Policy_Settings.ps1
Local_User_Accounts.ps1		Local_User_Accounts.ps1
Map_DLL_Ordinals_to_Function_Names.ps1		Map_DLL_Ordinals_to_Function_Names.ps1
Mapped_Drives_All_Users.ps1		Mapped_Drives_All_Users.ps1
Masquerading_Executables.ps1		Masquerading_Executables.ps1
Merge-File.ps1		Merge-File.ps1
Nearby_WiFi_Networks.ps1		Nearby_WiFi_Networks.ps1
Network_Interface_Priorities.ps1		Network_Interface_Priorities.ps1
Network_Interfaces.ps1		Network_Interfaces.ps1
Network_Providers.ps1		Network_Providers.ps1
Notepad_AutoSaved_Files_All_Users.ps1		Notepad_AutoSaved_Files_All_Users.ps1
Orphaned_Accounts.ps1		Orphaned_Accounts.ps1
Orphaned_Processes.ps1		Orphaned_Processes.ps1
Partitions.ps1		Partitions.ps1
PowerShell_ConsoleHost_History_All_Users.ps1		PowerShell_ConsoleHost_History_All_Users.ps1
PowerShell_ISE_AutoSaved_Files_All_Users.ps1		PowerShell_ISE_AutoSaved_Files_All_Users.ps1
Printer_and_Print_Job_Details.ps1		Printer_and_Print_Job_Details.ps1
Process_Connection_Details.ps1		Process_Connection_Details.ps1
Process_Metrics.ps1		Process_Metrics.ps1
Punycode_Unicode_Domain_Converter.ps1		Punycode_Unicode_Domain_Converter.ps1
README.md		README.md
Recent_Files_and_Directories.ps1		Recent_Files_and_Directories.ps1
RecycleBin_Forensics.ps1		RecycleBin_Forensics.ps1
Registered_Executable_Commands.ps1		Registered_Executable_Commands.ps1
Running_Processes.ps1		Running_Processes.ps1
SSL_Certificates.ps1		SSL_Certificates.ps1
Scheduled_Tasks.ps1		Scheduled_Tasks.ps1
Shortcut_Links_and_Targets.ps1		Shortcut_Links_and_Targets.ps1
Single_File_Entropy.ps1		Single_File_Entropy.ps1
Split-File.ps1		Split-File.ps1
Supported_Cryptographic_Service_Providers.ps1		Supported_Cryptographic_Service_Providers.ps1
Sysinternals_EulaAccepted_Status.ps1		Sysinternals_EulaAccepted_Status.ps1
System_Prefetch_Details.ps1		System_Prefetch_Details.ps1
System_Startup_Folder_Details.ps1		System_Startup_Folder_Details.ps1
True_High_Entropy_Files.ps1		True_High_Entropy_Files.ps1
UAC_Bypasses.ps1		UAC_Bypasses.ps1
UserAssist_Keys.ps1		UserAssist_Keys.ps1
Volume_Path_Mappings.ps1		Volume_Path_Mappings.ps1
Volume_Shadow_Copies.ps1		Volume_Shadow_Copies.ps1
Vulnerable_Unquoted_Service_Paths.ps1		Vulnerable_Unquoted_Service_Paths.ps1
WMI_Event_Subscriptions.ps1		WMI_Event_Subscriptions.ps1
WiFi_Forensics.ps1		WiFi_Forensics.ps1
Windows_Defender_Exclusions.ps1		Windows_Defender_Exclusions.ps1
Windows_Update_History.ps1		Windows_Update_History.ps1
Word_Document_History_All_Users.ps1		Word_Document_History_All_Users.ps1
Zip_Event_Logs.ps1		Zip_Event_Logs.ps1

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Repository files navigation

Blue

Capabilities

About

Uh oh!

Releases

Packages

Uh oh!

Contributors

Uh oh!

Languages

Folders and files

Latest commit

History

Repository files navigation

Blue

Capabilities

About

Resources

License

Uh oh!

Stars

Watchers

Forks

Releases

Packages 0

Uh oh!

Contributors

Uh oh!

Languages

Packages