Alternatives and similar repositories for PowerForensics:

Users that are interested in PowerForensics are comparing it to the libraries listed below

• davehull / Kansa
  A Powershell incident response framework
  ☆1,601Updated 2 years ago
• mattifestation / CimSweep
  CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across al…
  ☆653Updated 5 years ago
• gfoss / PSRecon
  PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted da…
  ☆486Updated 7 years ago
• MHaggis / sysmon-dfir
  Sources, configuration and how to detect evil things utilizing Microsoft Sysmon.
  ☆917Updated last year
• ion-storm / sysmon-config
  Advanced Sysmon ATT&CK configuration focusing on Detecting the Most Techniques per Data source in MITRE ATT&CK, Provide Visibility into …
  ☆801Updated last year
• palantir / windows-event-forwarding
  A repository for using windows event forwarding for incident detection and response
  ☆1,260Updated 9 months ago
• mattifestation / PowerShellArsenal
  A PowerShell Module Dedicated to Reverse Engineering
  ☆870Updated 3 years ago
• danielbohannon / Revoke-Obfuscation
  PowerShell Obfuscation Detection Framework
  ☆735Updated last year
• orlikoski / CyLR
  CyLR - Live Response Collection Tool
  ☆675Updated 2 years ago
• rvrsh3ll / Misc-Powershell-Scripts
  Random Tools
  ☆837Updated 2 years ago
• nshalabi / SysmonTools
  Utilities for Sysmon
  ☆1,518Updated 2 months ago
• nsacyber / Event-Forwarding-Guidance
  Configuration guidance for implementing collection of security relevant Windows Event Log events by using Windows Event Forwarding. #nsac…
  ☆866Updated 4 years ago
• WiredPulse / PoSh-R2
  PowerShell - Rapid Response... For the incident responder in you!
  ☆299Updated 5 years ago
• sbousseaden / EVTX-ATTACK-SAMPLES
  Windows Events Attack Samples
  ☆2,352Updated 2 years ago
• ANSSI-FR / AD-control-paths
  Active Directory Control Paths auditing and graphing tools
  ☆663Updated 4 years ago
• darkoperator / Posh-SecMod
  PowerShell Module with Security cmdlets for security work
  ☆442Updated 5 years ago
• PaulSec / awesome-windows-domain-hardening
  A curated list of awesome Security Hardening techniques for Windows.
  ☆1,770Updated 5 years ago
• trustedsec / SysmonCommunityGuide
  TrustedSec Sysinternals Sysmon Community Guide
  ☆1,212Updated 11 months ago
• NextronSystems / APTSimulator
  A toolset to make a system look as if it was the victim of an APT attack
  ☆2,584Updated last year
• MarkBaggett / srum-dump
  A forensics tool to convert the data in the Windows srum (System Resource Usage Monitor) database to an xlsx spreadsheet.
  ☆660Updated 2 weeks ago
• olafhartong / sysmon-modular
  A repository of sysmon configuration modules
  ☆2,771Updated 8 months ago
• cyberark / ACLight
  A script for advanced discovery of Privileged Accounts - includes Shadow Admins
  ☆801Updated 5 years ago
• ThreatHuntingProject / ThreatHunting
  An informational repo about hunting for adversaries in your IT environment.
  ☆1,774Updated 3 years ago
• JPCERTCC / LogonTracer
  Investigate malicious Windows logon by visualizing and analyzing Windows event log
  ☆2,884Updated 10 months ago
• sans-blue-team / DeepBlueCLI
  ☆2,269Updated last year
• philhagen / sof-elk
  Configuration files for the SOF-ELK VM
  ☆1,577Updated last month
• p3nt4 / PowerShdll
  Run PowerShell with rundll32. Bypass software restrictions.
  ☆1,798Updated 4 years ago
• ForensicArtifacts / artifacts
  Digital Forensics artifact repository
  ☆1,112Updated 4 months ago
• GossiTheDog / ThreatHunting
  Tools for hunting for threats.
  ☆582Updated last week
• PowerShellEmpire / PowerTools
  PowerTools is a collection of PowerShell projects with a focus on offensive operations.
  ☆2,112Updated 3 years ago