Pinned Loading

1. Splunk searches Splunk searches

   1

   New Scheduled Task created on Windows:

   2

   3

   `source="XmlWinEventLog:Security" EventID=4698 | rex field=EventData_Xml "<Data Name='TaskName'>(?<task_name>.+)</Data>" | rex field=EventData_Xml "&lt;Command&gt;(?<command>.+)&lt;/Command&gt;" | rex field=EventData_Xml "&lt;Arguments&gt;(?<args>.+)&lt;/Arguments&gt;" | table  _time host src_user src_nt_domain task_name command args | fillnull value=NA`

   4

   5

   New Service created on Windows:

2. Microsoft Sentinel Kusto Queries Microsoft Sentinel Kusto Queries

   1

   CheckPoint firewall name extractions

   2

   3

   ```

   4

   // Query to extract Checkpoint device names from logs

   5

   CommonSecurityLog

3. ghostwriter-client ghostwriter-client Public

   Node.js GraphQL client for Ghostwriter penetration test reporting

   JavaScript

4. guarismo.github.io guarismo.github.io Public

   My cyber security research blog

   CSS

5. shodan-recon shodan-recon Public

   Comprehensive Shodan API wrapper for reconnaissance and asset discovery

   JavaScript