EventList - The Event Analyzer. This tool helps you to decide which events to monitor in your infrastructure and supports you doing so.

PSAttck is a PowerShell Module that interacts Mitre ATT&CK Framework

This script reviews the Registry Hive and identifies any scheduled tasks without SD (security descriptor) Value within the Task Key. We recommend that you perform analysis on these tasks as needed. The absence of SecurityDescriptor is a Defense Evasion and Persistence technique as these tasks will remain hidden from regular tasks queries results ex... More info