Objective Configure Wazuh Active Response to automatically remediate malicious files detected by the VirusTotal integration on Windows endpoints. Building on our previous VirusTotal integration gui...

Configure Wazuh to integrate with the VirusTotal API for automated file reputation checks and real-time threat intelligence.

A reconnaissance tool that uses rule-based analysis to locate high-value files, credentials, and privilege escalation opportunities within Active Directory environments.

Create a detection rule using LOLDrivers intelligence to identify potentially abused signed drivers associated with privilege escalation and kernel-level attacks.

Learn how to safely rotate the KRBTGT account password twice to invalidate existing Kerberos tickets and help protect Active Directory from Golden Ticket attacks.

Securely audit Active Directory for breached credentials by matching NTLM password hashes with the Have I Been Pwned dataset, enabling proactive remediation and stronger security.

Build an Azure Logic App that automates Microsoft Entra ID application secret expiration monitoring and administrator notifications.