Alternatives and similar repositories for PopulateActiveDirectory

Users that are interested in PopulateActiveDirectory are comparing it to the libraries listed below

• p0w3rsh3ll / NetCease
  ☆68Updated 4 years ago
• NetSPI / PowerHunt
  PowerHunt is a modular threat hunting framework written in PowerShell that leverages PowerShell Remoting for data collection on scale.
  ☆71Updated 11 months ago
• reprise99 / 4688-sysmon
  ☆61Updated 2 years ago
• Trimarc / Invoke-TrimarcADChecks
  The Invoke-TrimarcADChecks.ps1 PowerShell script is designed to gather data from a single domain AD forest based on our similar checks pe…
  ☆56Updated 2 years ago
• improsec / Get-bADpasswords
  Get insights into the actual strength and quality of passwords in Active Directory.
  ☆157Updated last year
• LaresLLC / SysmonConfigPusher
  Pushes Sysmon Configs
  ☆88Updated 4 years ago
• dwmetz / QuickPcap
  A quick and easy PowerShell script to collect a packet trace with option to convert .etl to .pcap.
  ☆39Updated 3 years ago
• sap8899 / reportly
  Reportly is an AzureAD user activity report tool.
  ☆94Updated 2 years ago
• YossiSassi / hAcKtive-Directory-Forensics
  ☆53Updated last month
• humio / security_monitoring
  ☆42Updated 2 years ago
• olafhartong / DefenderHarvester
  Expose a lot of MDE telemetry that is not easily accessible in any searchable form
  ☆111Updated 2 months ago
• secgroundzero / KQL_Reference_Manual
  ☆43Updated 4 years ago
• invictus-ir / Blue-team-app-Office-365-and-Azure
  ☆74Updated last year
• YossiSassi / Get-UserSession
  Query user sessions for the entire domain (Interactive/RDP etc), allowing you to query a Username and see all their logged on sessions, w…
  ☆95Updated 7 months ago
• jakehildreth / BlueTuxedo
  A tiny tool built to find and fix common misconfigurations in Active Directory-integrated DNS
  ☆141Updated 2 weeks ago
• jischell-msft / RemoteManagementMonitoringTools
  Collection of Remote Management Monitoring tool artifacts, for assisting forensics and investigations
  ☆99Updated 3 months ago
• LuccaSA / PingCastle-Notify
  Monitor your PingCastle scans to highlight the rule diff between two scans
  ☆153Updated last month
• olafhartong / MDE-AuditCheck
  MDE relies on some of the Audit settings to be enabled
  ☆100Updated 3 years ago
• Bert-JanP / Domain-Response
  Domain Response is a tool that is designed to help you automate the investigation for a domain. This tool is specificly designed to autom…
  ☆49Updated 2 months ago
• zaneGittins / Huntress
  PowerShell tool to triage systems
  ☆12Updated 2 years ago
• tobor88 / PowerShell-Blue-Team
  Collection of PowerShell functinos and scripts a Blue Teamer might use
  ☆88Updated 2 years ago
• jangeisbauer / gundog
  gundog - guided hunting in Microsoft Defender
  ☆52Updated 4 years ago
• JeffMichelmore / MDEKit
  ☆41Updated 2 years ago
• gmellini / Microsoft-Defender-Security-Center-Hunting-Queries
  Hunting Queries for Microsoft Defender Security Center https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defe…
  ☆39Updated 4 years ago
• Kaidja / EntraID
  Automation around Entra ID
  ☆37Updated 3 months ago
• mdecrevoisier / Windows-auditing-baseline
  Provides an advanced baseline to implement a secure Windows auditing strategy on Windows OS.
  ☆57Updated 5 months ago
• eshlomo1 / Azure-AD-Incident-Response
  Azure AD Incident Response
  ☆26Updated 4 years ago
• olafhartong / WDACme
  A WDAC configuration repository with the sole intention of enriching MDE
  ☆29Updated 4 months ago
• DefensiveOrigins / DO-LAB
  ☆47Updated 3 weeks ago
• csandker / Azure-AccessPermissions
  ☆110Updated 2 years ago