Sparrow.ps1 – this tool is intended for use by incident responders and is narrowly focused on activity that is endemic to the recent identity and authentication based attacks seen in multiple sectors. CISA strongly encourages users and administrators to visit the following GitHub page for additional information and detection countermeasures
