Alternatives and similar repositories for AD-control-paths

Users that are interested in AD-control-paths are comparing it to the libraries listed below

• ANSSI-FR / ADTimeline
  Timeline of Active Directory changes with replication metadata
  ☆505Updated 4 months ago
• mattifestation / CimSweep
  CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across al…
  ☆655Updated 5 years ago
• cyberark / ACLight
  A script for advanced discovery of Privileged Accounts - includes Shadow Admins
  ☆814Updated 5 years ago
• CredDefense / CredDefense
  Credential and Red Teaming Defense for Windows Environments
  ☆329Updated last year
• dionach / NtdsAudit
  An Active Directory audit utility
  ☆421Updated last year
• ion-storm / sysmon-config
  Advanced Sysmon ATT&CK configuration focusing on Detecting the Most Techniques per Data source in MITRE ATT&CK, Provide Visibility into …
  ☆808Updated last year
• outflanknl / Invoke-ADLabDeployer
  Automated deployment of Windows and Active Directory test lab networks. Useful for red and blue teams.
  ☆491Updated 6 years ago
• nsacyber / Event-Forwarding-Guidance
  Configuration guidance for implementing collection of security relevant Windows Event Log events by using Windows Event Forwarding. #nsac…
  ☆871Updated 4 years ago
• utsecnet / PAW
  ☆315Updated 5 years ago
• WiredPulse / PoSh-R2
  PowerShell - Rapid Response... For the incident responder in you!
  ☆300Updated 5 years ago
• darkoperator / Posh-SecMod
  PowerShell Module with Security cmdlets for security work
  ☆447Updated 5 years ago
• gfoss / PSRecon
  PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted da…
  ☆487Updated 8 years ago
• danielbohannon / Revoke-Obfuscation
  PowerShell Obfuscation Detection Framework
  ☆740Updated last year
• palantir / windows-event-forwarding
  A repository for using windows event forwarding for incident detection and response
  ☆1,274Updated 11 months ago
• jephthai / OpenPasswordFilter
  An open source custom password filter DLL and userspace service to better protect / control Active Directory domain passwords.
  ☆396Updated last year
• clr2of8 / DPAT
  Domain Password Audit Tool for Pentesters
  ☆980Updated 3 years ago
• BloodHoundAD / BloodHound-Tools
  Miscellaneous tools for BloodHound
  ☆395Updated last year
• miriamxyra / EventList
  EventList
  ☆376Updated 4 years ago
• A-mIn3 / WINspect
  Powershell-based Windows Security Auditing Toolbox
  ☆575Updated 6 years ago
• l0ss / Grouper2
  Find vulnerabilities in AD Group Policy
  ☆643Updated 3 years ago
• MHaggis / sysmon-dfir
  Sources, configuration and how to detect evil things utilizing Microsoft Sysmon.
  ☆922Updated last year
• PowerShellMafia / PowerSCCM
  PowerSCCM - PowerShell module to interact with SCCM deployments
  ☆363Updated 3 years ago
• l0ss / Grouper
  A PowerShell script for helping to find vulnerable settings in AD Group Policy. (deprecated, use Grouper2 instead!)
  ☆739Updated 6 years ago
• cyberark / zBang
  zBang is a risk assessment tool that detects potential privileged account threats
  ☆340Updated 3 years ago
• GoFetchAD / GoFetch
  GoFetch is a tool to automatically exercise an attack plan generated by the BloodHound application.
  ☆635Updated 8 years ago
• TonyPhipps / Meerkat
  A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.
  ☆464Updated 8 months ago
• NetSPI / PowerShell
  NetSPI PowerShell Scripts
  ☆334Updated 6 months ago
• ubeeri / Invoke-UserSimulator
  Simulates common user behaviour on local and remote Windows hosts.
  ☆281Updated 7 years ago
• JPCERTCC / ToolAnalysisResultSheet
  Tool Analysis Result Sheet
  ☆355Updated 7 years ago
• davehull / Kansa
  A Powershell incident response framework
  ☆1,605Updated 2 years ago