Test for applicable patches to prevent the WannaCry malware. Tests for SMB1 protocol and component.

Project that help restoring malware / run / deleted scripts straight from Event Logs for further analysis

Test for applicable patches to prevent the WannaCry/WannaCrypt malware. Tests for the SMB1 protocol and component.

Module to interact with the GreyNoise API.

This script reviews the Registry Hive and identifies any scheduled tasks without SD (security descriptor) Value within the Task Key. We recommend that you perform analysis on these tasks as needed. The absence of SecurityDescriptor is a Defense Evasion and Persistence technique as these tasks will remain hidden from regular tasks queries results ex... More info