> For the complete documentation index, see [llms.txt](https://blog.pwntario.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://blog.pwntario.com/team-posts.md).

# Team Posts

- [Anton's Posts](https://blog.pwntario.com/team-posts/antons-posts.md)
- [Hunt Fast: Splunk and tstats](https://blog.pwntario.com/team-posts/antons-posts/splunktstats.md)
- [Hunting Malicious Macros](https://blog.pwntario.com/team-posts/antons-posts/hunting-malicious-macros.md)
- [Get Azure Key Vault Data into Splunk](https://blog.pwntario.com/team-posts/antons-posts/get-azure-key-vault-data-into-splunk.md)
- [Edit Your Sysmon Config in Style](https://blog.pwntario.com/team-posts/antons-posts/edit-your-sysmon-config-in-style.md)
- [Wrangle Your PowerShell Transcript Logs with Apache Nifi](https://blog.pwntario.com/team-posts/antons-posts/wrangle-your-powershell-transcript-logs.md)
- [(Very) Basic Elastic SIEM Set up](https://blog.pwntario.com/team-posts/antons-posts/elastic-siem-set-up.md)
- [Moloch + Suricata + JA3](https://blog.pwntario.com/team-posts/antons-posts/moloch-suricata-ja3.md)
- [Making Lateral Movement Difficult in an Active Directory Environment](https://blog.pwntario.com/team-posts/antons-posts/making-lateral-movement-difficult-in.md)
- [Taking a Closer Look at PowerShell Download Cradles](https://blog.pwntario.com/team-posts/antons-posts/taking-closer-look-at-powershell.md)
- [Visualize Windows Logs With Neo4j](https://blog.pwntario.com/team-posts/antons-posts/visualize-windows-logs-with-neo4j.md)
- [Device Guard - Fixing VMWare Tools](https://blog.pwntario.com/team-posts/antons-posts/device-guard-fixing-vmware-tools.md)
- [Offensive Security OSCE (CTP) Review](https://blog.pwntario.com/team-posts/antons-posts/offensive-security-osce-ctp-review.md)
- [(Attempting) to Detect Responder with Sysmon](https://blog.pwntario.com/team-posts/antons-posts/attempting-to-detect-responder-with.md)
- [Working with Sysmon](https://blog.pwntario.com/team-posts/antons-posts/working-with-sysmon.md)
- [Setting Up Sysmon](https://blog.pwntario.com/team-posts/antons-posts/setting-up-sysmon.md)
- [Lee's Posts](https://blog.pwntario.com/team-posts/lees-posts.md)
- [Malicious AzureAD Application Registrations](https://blog.pwntario.com/team-posts/lees-posts/malicious-azuread-app-registrations.md)