☆41Jun 28, 2019Updated 7 years ago
Alternatives and similar repositories for Powershell-IR-Scripts
Users that are interested in Powershell-IR-Scripts are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- CB API scripts for IR, administration, etc.☆32Jun 3, 2019Updated 7 years ago
- Repository to track community hardware, data and funding.☆14Apr 8, 2022Updated 4 years ago
- Quick script to build host or investigation timelines using Carbon Black Response☆12Sep 25, 2018Updated 8 years ago
- Remotely Install the Carbon Black Sensor in Bulk, using PowerShell and PSEXEC, silently, on multiple machines.☆23Jul 17, 2020Updated 6 years ago
- A simple utility to check the status of and/or disable SMBv1 on Windows system via Cb Response's Live Response functionality.☆15May 28, 2019Updated 7 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Python script that generates a HTML triage report of iOS notifications content.☆18Sep 19, 2019Updated 7 years ago
- Multithreaded threat Intelligence gathering built with Python3☆178Jan 23, 2018Updated 8 years ago
- PowerShell script useful for Incident Response and security/configuration baselines for Windows Vista and later☆20Jul 29, 2026Updated 3 months ago
- Command line interface to Carbon Black Response☆38May 12, 2020Updated 6 years ago
- Subscribe to raw VMware Carbon Black EDR event feed and forward to another system, such as Splunk.☆73Jul 13, 2026Updated 3 months ago
- Quick iOS Backup UnFunkerizor☆21May 25, 2021Updated 5 years ago
- parser for Google search strings☆42Sep 14, 2019Updated 7 years ago
- ☆16Dec 16, 2020Updated 5 years ago
- Collection of useful, up to date, Carbon Black Response Queries☆86Oct 23, 2020Updated 6 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Carbon Black API - Python language bindings☆145Aug 22, 2024Updated 2 years ago
- event shipper for Carbon Black Defense notifications☆10Feb 25, 2023Updated 3 years ago
- A framework for developing alerting and detection strategies for incident response.☆10Mar 26, 2024Updated 2 years ago
- Lists of sources and utilities utilized to hunt, detect and prevent evildoers.☆172Dec 10, 2018Updated 7 years ago
- Registry to JSON. This Project is for learning purposes and is not maintained.☆12Dec 28, 2021Updated 4 years ago
- Windows Live Artifacts Acquisition Script☆195Jun 20, 2022Updated 4 years ago
- NSKeyedArchive plist deserializer☆31Sep 13, 2024Updated 2 years ago
- Automatic extraction and parsing of Snapchat for iOS and Android☆52Apr 2, 2024Updated 2 years ago
- Android Usagestats XML + Protobuf Parser☆32Oct 11, 2020Updated 6 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Carbon Black Feeds☆74Apr 4, 2023Updated 3 years ago
- ☆11Feb 9, 2023Updated 3 years ago
- xLEAPP - Merging of iLEAPP/RLEAPP/vLEAPP, ALEAPP, cLEAPP☆58Oct 26, 2026Updated last week
- Repository for all cbapi example scripts☆16Sep 18, 2018Updated 8 years ago
- KQL queries for Microsoft Defender Advanced Hunting organized around the TTPs of the MITRE ATT&CK framework.☆25Nov 7, 2024Updated last year
- ☆19Sep 13, 2021Updated 5 years ago
- Carbon Black SIEM Integration and Automation for LogRhythm☆16Mar 2, 2018Updated 8 years ago
- Invoke-LiveResponse☆151Feb 22, 2022Updated 4 years ago
- Tool suite for inspecting NTFS artifacts.☆229Nov 1, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Tool to decompress data from Windows 10 page files and memory dumps, that has been compressed by the Windows 10 memory manager.☆49Apr 9, 2019Updated 7 years ago
- extractor for QNX6 filesystem format.☆45Nov 22, 2023Updated 2 years ago
- A collection of Terraform and Ansible scripts that automatically (and quickly) deploys a small Velociraptor R&D lab.☆23Apr 16, 2021Updated 5 years ago
- Hunt the windows Registry automatically using VQL☆18Updated this week
- This directory contains random scripts from threat hunting or malware research☆11Feb 15, 2018Updated 8 years ago
- NTFS file system specimens☆13May 21, 2026Updated 5 months ago
- Dump of organized knowledge on DFIR☆138Oct 4, 2021Updated 5 years ago