Alternatives and similar repositories for powershell-baseline

Users that are interested in powershell-baseline are comparing it to the libraries listed below

• WiredPulse / AutomatedProfiler
  Automated forensics written in PowerShell
  ☆34Updated 5 years ago
• lordsaibat / finding_windows_privileges
  Windows privileges add to the complexity of Windows user permissions. Each additional user added to a group could lead to a domain compro…
  ☆10Updated 7 years ago
• Invoke-IR / WmiEvent
  A PowerShell module to abstract the complexities of Permanent WMI Event Subscriptions
  ☆55Updated 9 years ago
• secabstraction / PowerStash
  ☆23Updated 9 years ago
• Invoke-IR / PowerForensicsPortable
  ☆32Updated 7 months ago
• Invoke-IR / Presentations
  ☆29Updated 8 years ago
• acochenour / PSInspect
  PowerShell script useful for Incident Response and security/configuration baselines for Windows Vista and later
  ☆20Updated 9 years ago
• duffney / WEF_ADSecuirtyLogs
  Windows Event Forwarding for Active Directory Security Logs
  ☆29Updated 9 years ago
• glassdfir / SysmonMapper
  Maps process creation logged by Sysmon uses Google Org Chart API
  ☆24Updated 9 years ago
• darkoperator / ADAudit
  Windows PowerShell module to help in the auditing of Active Directory environments.
  ☆50Updated 8 years ago
• zacbrown / PowerKrabsEtw
  PowerKrabsEtw is a PowerShell interface for doing real-time ETW tracing.
  ☆103Updated 4 years ago
• matthewdunwoody / PS_logging_reg
  A Windows REG file to enable all default PowerShell logging on a system with PowerShell v5 installed
  ☆16Updated 9 years ago
• MotiBa / ProcessMonitorAnalyzeMalware
  Script to parse Process Monitor XML log file, and give you a summary report.
  ☆23Updated 9 years ago
• K2 / Scripting
  PS / Bash / Python / Other scripts For FUN!
  ☆55Updated 4 months ago
• michdu / WhatAmIMissing
  Get all AD objects which are hidden from you
  ☆18Updated 7 years ago
• zacbrown / PowerShellMethodAuditor
  PowerShellMethodAuditor listens to the PowerShell ETW provider and logs PowerShell method invocations.
  ☆38Updated 7 years ago
• ANSSI-FR / SysvolExplorer
  Active Directory Group Policy analyzer
  ☆105Updated 11 years ago
• hardwaterhacker / scandiff
  Scandiff is a PowerShell script to automate host discovery and scanning with nmap. After discovering and scanning hosts, scandiff perfor…
  ☆17Updated 10 years ago
• secgroundzero / ossem_modular
  OSSEM Modular
  ☆27Updated 5 years ago
• swisscom / PowerSponse
  PowerSponse is a PowerShell module focused on targeted containment and remediation during incident response.
  ☆38Updated 3 years ago
• AlmCo / Panorama
  Fast incident overview
  ☆40Updated 8 years ago
• Cr0n1c / SCCM-Enumeration
  ☆40Updated 9 years ago
• Beercow / ProcDOT-Plugins
  Plugins to add funtionality to ProcDOT. http://www.procdot.com
  ☆23Updated last year
• curi0usJack / activedirectory
  This script runs several security checks and makes modifications (with your permission) to your Active Directory domain to improve it's s…
  ☆45Updated 9 years ago
• tedhardyMSFT / EventLogUtilities
  Set of utilities for getting information about Windows Events
  ☆15Updated 7 years ago
• ajackal / ir_scripts
  incident response scripts
  ☆19Updated 6 years ago
• ion-storm / emotet-malware-killer
  ☆39Updated 5 years ago
• darkoperator / vscode-sysmon
  Visual Studio Code Microsoft Sysinternal Sysmon configuration file extension.
  ☆53Updated last year
• MotiBa / Sysmon
  Sysmon configuration
  ☆65Updated 7 years ago
• mattifestation / WDACPolicies
  A collection of Windows software baseline notes with corresponding Windows Defender Application Control (WDAC) policies
  ☆62Updated last year