Alternatives and similar repositories for FarsightAD

Users that are interested in FarsightAD are comparing it to the libraries listed below

• QueenSquishy / plague
  Default Detections for EDR
  ☆97Updated last year
• 0xe7 / WonkaVision
  ☆85Updated 3 years ago
• Cyb3r-Monk / ACCD
  Active C&C Detector
  ☆155Updated 2 years ago
• BinaryDefense / YaraMemoryScanner
  Simple PowerShell script to enable process scanning with Yara.
  ☆97Updated 3 years ago
• LuccaSA / PingCastle-Notify
  Monitor your PingCastle scans to highlight the rule diff between two scans
  ☆154Updated last month
• doredry / TokenFinder
  Tool to extract powerful tokens from Office desktop apps memory
  ☆72Updated last year
• HackmichNet / AzTokenFinder
  ☆107Updated 3 years ago
• TH3xACE / EDR-Test
  Automating EDR Testing with reference to MITRE ATTACK via Cobalt Strike [Purple Team].
  ☆155Updated 2 years ago
• NetSPI / PowerHunt
  PowerHunt is a modular threat hunting framework written in PowerShell that leverages PowerShell Remoting for data collection on scale.
  ☆71Updated last year
• secureworks / TokenMan
  ☆105Updated 3 years ago
• Sam0x90 / CTI
  Repo containing various intel-based resources such as threat research, adversary emulation/simulation plan and so on
  ☆84Updated last year
• yarox24 / EvtxHussar
  Initial triage of Windows Event logs
  ☆105Updated last year
• MazX0p / ThreatHound
  ☆160Updated 2 years ago
• ACE-Responder / ace-proctree
  Create a cool process tree like https://twitter.com/ACEResponder.
  ☆35Updated 2 years ago
• LuemmelSec / Custom-BloodHound-Queries
  ☆184Updated last year
• improsec / ImproHound
  Identify the attack paths in BloodHound breaking your AD tiering
  ☆325Updated 3 years ago
• Qazeer / InfoSec-Notes
  InfoSec Notes
  ☆60Updated last year
• csandker / Azure-AccessPermissions
  ☆110Updated 2 years ago
• LaresLLC / SysmonConfigPusher
  Pushes Sysmon Configs
  ☆90Updated 4 years ago
• nasbench / Misc-Research
  A collection of tools, scripts and personal research
  ☆154Updated last month
• NotSoSecure / NoPrompt
  ☆99Updated 5 months ago
• Semperis / GoldenGMSA
  GolenGMSA tool for working with GMSA passwords
  ☆165Updated 4 months ago
• olafhartong / DefenderHarvester
  Expose a lot of MDE telemetry that is not easily accessible in any searchable form
  ☆112Updated 4 months ago
• SikretaLabs / BlueMap
  A Azure Exploitation Toolkit for Red Team & Pentesters
  ☆166Updated 2 years ago
• darkoperator / Veil-PowerView
  Veil-PowerView is a powershell tool to gain network situational awareness on Windows domains.
  ☆62Updated 10 years ago
• GabrielDuschl / Automated-CME-Password-Spraying
  A script designed to test passwords against user accounts within an Active Directory environment, offering customizable Account Lockout T…
  ☆16Updated 2 years ago
• lkarlslund / hashmuncher
  Grab NetNTLMv2 hashes using ETW with administrative rights on Windows 8.1 / Windows Server 2016 and later
  ☆93Updated 2 years ago
• LOLESXi-Project / LOLESXi
  LOLESXi is a curated compilation of binaries/scripts available in VMware ESXi that are were used to by adversaries in their intrusions. T…
  ☆143Updated last month
• magicsword-io / LOLBASline
  Baseline a Windows System against LOLBAS
  ☆69Updated last year
• RomaissaAdjailia / Get-AppLockerEventlog
  This is a repo for fetching Applocker event log by parsing the win-event log
  ☆31Updated 3 years ago