Alternatives and similar repositories for ORADAZ:

Users that are interested in ORADAZ are comparing it to the libraries listed below

• ANSSI-FR / guide-journalisation-microsoft
  Guide journalisation Microsoft
  ☆60Updated 8 months ago
• tsale / EDR-Telemetry-Website
  ☆74Updated last week
• youhgo / DOPP
  DFIR ORC PARSER PROJECT
  ☆25Updated 3 weeks ago
• LuccaSA / PingCastle-Notify
  Monitor your PingCastle scans to highlight the rule diff between two scans
  ☆109Updated 7 months ago
• ANSSI-FR / orc2timeline
  orc2timeline extracts and analyzes artifacts contained in archives generated with DFIR-ORC.exe to create a timeline from them
  ☆32Updated 3 months ago
• CrowdStrike / VirtualGHOST
  VirtualGHOST Detection Tool
  ☆90Updated 10 months ago
• Qazeer / FarsightAD
  PowerShell script that aim to help uncovering (eventual) persistence mechanisms deployed by a threat actor following an Active Directory …
  ☆93Updated last year
• AlbinoGazelle / esxi-testing-toolkit
  🧰 ESXi Testing Tookit is a command-line utility designed to help security teams test ESXi detections.
  ☆71Updated 2 months ago
• NetSPI / PowerHunt
  PowerHunt is a modular threat hunting framework written in PowerShell that leverages PowerShell Remoting for data collection on scale.
  ☆65Updated 3 months ago
• Sam0x90 / CTI
  Repo containing various intel-based resources such as threat research, adversary emulation/simulation plan and so on
  ☆81Updated 10 months ago
• techspence / ADeleginator
  A companion tool that uses ADeleg to find insecure trustee and resource delegations in Active Directory
  ☆166Updated 6 months ago
• lkarlslund / deploy-goad
  Script to install prerequisites for deploying GOAD on Ubuntu Linux 22.04
  ☆110Updated 9 months ago
• Tanguy-Boisset / bloodhound-automation
  Automatically run and populate a new instance of BH CE
  ☆69Updated last week
• xg5-simon / MS-Graph-BlueTeam
  MS Graph Commands and Tools for Blue Teamers
  ☆49Updated last year
• ANSSI-FR / DFIR4vSphere
  Powershell module for VMWare vSphere forensics
  ☆149Updated 4 months ago
• jischell-msft / RemoteManagementMonitoringTools
  Collection of Remote Management Monitoring tool artifacts, for assisting forensics and investigations
  ☆84Updated 7 months ago
• joeavanzato / RetrievIR
  PowerShell script designed to help Incident Responders collect forensic evidence from local and remote Windows devices.
  ☆100Updated 6 months ago
• MHaggis / ASRGEN
  ASR Configurator, Essentials and Atomic Testing
  ☆37Updated 4 months ago
• olafhartong / DefenderHarvester
  Expose a lot of MDE telemetry that is not easily accessible in any searchable form
  ☆105Updated 3 months ago
• securityjoes / ForensicMiner
  A really good DFIR automation for collecting and analyzing evidence designed for cybersecurity professionals.
  ☆153Updated 10 months ago
• csandker / Azure-AccessPermissions
  ☆108Updated 2 years ago
• YossiSassi / hAcKtive-Directory-Forensics
  ☆50Updated 2 months ago
• soufianetahiri / RansomwareSimulator.public
  Ransomware simulator written in C#
  ☆36Updated 2 years ago
• hackcyom / AzureKitty
  AzureKitty is an Office 365 and Azure configuration audit tool
  ☆14Updated last year
• ScarredMonk / PopulateActiveDirectory
  Powershell script to build active directory forest and populate AD with random AD objects including AD users objects, computers objects, …
  ☆32Updated 3 years ago
• MeltingBot / fake_ransomware_group
  Interactive simulation of a fictional ransomware group's dashboard
  ☆12Updated 5 months ago
• mandiant / citrix-ioc-scanner-cve-2023-3519
  ☆65Updated last year