Alternatives and similar repositories for WhoYouCalling:

Users that are interested in WhoYouCalling are comparing it to the libraries listed below

• lkarlslund / nifo
  Nuke It From Orbit - remove AV/EDR with physical access
  ☆254Updated 2 months ago
• joeavanzato / Trawler
  PowerShell script helping Incident Responders discover potential adversary persistence mechanisms.
  ☆314Updated 4 months ago
• p0dalirius / ExtractBitlockerKeys
  A system administration or post-exploitation script to automatically extract the bitlocker recovery keys from a domain.
  ☆362Updated 3 weeks ago
• techspence / ScriptSentry
  ScriptSentry finds misconfigured and dangerous logon scripts.
  ☆471Updated 2 months ago
• cgosec / Blauhaunt
  A tool collection for filtering and visualizing logon events. Designed to help answering the "Cotton Eye Joe" question (Where did you com…
  ☆167Updated this week
• MHaggis / PowerShell-Hunter
  PowerShell tools to help defenders hunt smarter, hunt harder.
  ☆226Updated last month
• ExaTrack / Kdrill
  Python tool to check rootkits in Windows kernel
  ☆192Updated 2 weeks ago
• subat0mik / Misconfiguration-Manager
  Misconfiguration Manager is a central knowledge base for all known Microsoft Configuration Manager tradecraft and associated defensive an…
  ☆871Updated last week
• Squiblydoo / debloat
  A GUI and CLI tool for removing bloat from executables
  ☆379Updated last month
• Neo23x0 / god-mode-rules
  God Mode Detection Rules
  ☆134Updated 6 months ago
• secureworks / pytune
  ☆194Updated last week
• Bert-JanP / Incident-Response-Powershell
  PowerShell Digital Forensics & Incident Response Scripts.
  ☆566Updated last month
• srlabs / Certiception
  An ADCS honeypot to catch attackers in your internal network.
  ☆280Updated 7 months ago
• hackertarget / pcap-did-what
  Analyze pcaps with Zeek and a Grafana Dashboard
  ☆165Updated 8 months ago
• lawndoc / Respotter
  Respotter is a Responder honeypot. Detect Responder in your environment as soon as it's spun up.
  ☆191Updated last month
• MaLDAPtive / Invoke-Maldaptive
  MaLDAPtive is a framework for LDAP SearchFilter parsing, obfuscation, deobfuscation and detection.
  ☆255Updated 6 months ago
• NetSPI / PowerHuntShares
  PowerHuntShares is an audit script designed in inventory, analyze, and report excessive privileges configured on Active Directory domains…
  ☆750Updated this week
• MalBeacon / what-is-this-stealer
  A repository of credential stealer formats
  ☆193Updated last month
• RedByte1337 / GraphSpy
  Initial Access and Post-Exploitation Tool for AAD and O365 with a browser-based GUI
  ☆653Updated 2 weeks ago
• Friends-Security / ShadowHound
  PowerShell scripts for alternative SharpHound enumeration, including users, groups, computers, and certificates, using the ActiveDirector…
  ☆310Updated 2 months ago
• cxnturi0n / convoC2
  C2 infrastructure that allows Red Teamers to execute system commands on compromised hosts through Microsoft Teams.
  ☆364Updated last month
• PShlyundin / GPOHunter
  A security assessment tool for analyzing Active Directory Group Policy Objects (GPOs) to identify misconfigurations and vulnerabilities
  ☆193Updated last month
• CrowdStrike / VirtualGHOST
  VirtualGHOST Detection Tool
  ☆89Updated 9 months ago
• awakecoding / wireshark-rdp
  Wireshark RDP resources
  ☆210Updated last week
• Slowerzs / ThievingFox
  ☆530Updated 10 months ago
• AirbusProtect / AD-Canaries
  The purpose of this project is to publish and maintain the deployment PowerShell script that automates deployments for Active Directory C…
  ☆249Updated last year
• akamai / Invoke-DHCPCheckup
  ☆103Updated last year
• JumpsecLabs / TokenSmith
  TokenSmith generates Entra ID access & refresh tokens on offensive engagements. It is suitable for both covert adversary simulations and …
  ☆250Updated 3 weeks ago
• Psmths / windows-forensic-artifacts
  Handbook of windows forensic artifacts across multiple Windows version with interpretation tips and some examples. Work in progress!
  ☆320Updated 6 months ago