SamuelArnold / StarKill3r
A security repo
☆25Updated 7 years ago
Alternatives and similar repositories for StarKill3r
Users that are interested in StarKill3r are comparing it to the libraries listed below
Sorting:
- Defensive-oriented Active Directory enumeration☆23Updated 9 years ago
- Build a domain with three quick PowerShell scripts!☆29Updated 4 years ago
- Tony's collection of powershell scripts, typically geared toward cybersec☆33Updated this week
- Visual Studio Code Microsoft Sysinternal Sysmon configuration file extension.☆51Updated last year
- Svendsen Tech's PowerShell nmap-like port scanner accepting IPv4 CIDR notation☆54Updated 2 years ago
- Just a bunch of code snippets to identify and remediate common Active Directory Certificate Services issues.☆32Updated last year
- Little PowerShell module to extract PowerShell scripts that no longer exists on disk but were run and are still in Event Logs.☆40Updated 4 years ago
- Azure AD Incident Response☆25Updated 3 years ago
- Microsoft GPO Readiness Lateral Movement Detection Tool☆16Updated 2 years ago
- Simple Powershell scripts to collect all Windows Event Logs from a host and parse them into one CSV timeline.☆33Updated 6 years ago
- Module to update the Krbtgt password☆47Updated last year
- Automatically generated Sysmon parser for Azure Sentinel☆16Updated this week
- Event metadata collected across all manifest-based ETW providers on Window 10 1903☆31Updated 5 years ago
- PowerSponse is a PowerShell module focused on targeted containment and remediation during incident response.☆38Updated 3 years ago
- Tier0 (Tier Zero) Account discovery for ActiveDirectory Security☆17Updated 7 years ago
- AD Live changes viewer☆35Updated 2 years ago
- A quick and easy PowerShell script to collect a packet trace with option to convert .etl to .pcap.☆40Updated 2 years ago
- AppLocker hardening policies☆25Updated 6 years ago
- Active Directory Group Policy analyzer☆14Updated 5 years ago
- A collection of Windows software baseline notes with corresponding Windows Defender Application Control (WDAC) policies☆62Updated last year
- Windows 10 Live Information viewer☆36Updated 3 years ago
- A WDAC configuration repository with the sole intention of enriching MDE☆28Updated 2 years ago
- PowerShell script useful for Incident Response and security/configuration baselines for Windows Vista and later☆20Updated 9 years ago
- Creates an ATT&CK Navigator map of an Adversary Emulation Plan☆17Updated 3 years ago
- ☆45Updated 2 years ago
- Automated forensics written in PowerShell☆34Updated 5 years ago
- Some portable tools, some YARA, some Python, and a little bit of love. Not all of these tools can be used in incident response. Use PEs…☆36Updated 3 weeks ago
- Windows Event Forwarding for Active Directory Security Logs☆29Updated 8 years ago
- BloodHound Data Scanner☆45Updated 4 years ago
- Set of ultra technical notes about AD☆18Updated 6 years ago