TonyPhipps / Powershell
Tony's collection of powershell scripts, typically geared toward cybersec
☆32Updated last week
Alternatives and similar repositories for Powershell:
Users that are interested in Powershell are comparing it to the libraries listed below
- PowerSponse is a PowerShell module focused on targeted containment and remediation during incident response.☆38Updated 2 years ago
- Simple Powershell scripts to collect all Windows Event Logs from a host and parse them into one CSV timeline.☆33Updated 6 years ago
- Little PowerShell module to extract PowerShell scripts that no longer exists on disk but were run and are still in Event Logs.☆40Updated 4 years ago
- incident response scripts☆19Updated 5 years ago
- PowerShell Script for Agentless Incident Response☆25Updated 6 years ago
- 🔎 Use urlscan.io with PowerShell!☆32Updated 3 years ago
- Build a domain with three quick PowerShell scripts!☆29Updated 4 years ago
- ☆49Updated 4 years ago
- Azure Sentinel Template parser☆16Updated 4 years ago
- PowerShell script useful for Incident Response and security/configuration baselines for Windows Vista and later☆20Updated 8 years ago
- Find accounts using common and default passwords in Active Directory.☆66Updated 5 years ago
- A Windows PowerShell & PowerShell Core Module to calculate a CVSS3 Score based on a Vector string☆12Updated 2 years ago
- AdmPwd.E client and support tools☆32Updated 4 years ago
- A series of scripts☆98Updated 3 years ago
- Defensive-oriented Active Directory enumeration☆23Updated 9 years ago
- Finds event logs between two time points. Useful for helpdesk/support/malware analysis.☆44Updated 5 years ago
- Microsoft GPO Readiness Lateral Movement Detection Tool☆16Updated 2 years ago
- Builds a hashmap of AD NTLM hashes/usernames and iterates through a second list of hashes checking for the existence of each entry in the…☆77Updated 4 years ago
- This script runs several security checks and makes modifications (with your permission) to your Active Directory domain to improve it's s…☆45Updated 9 years ago
- This repository was created to aid in the deployment/maintenance of the Sysmon service on a large number of computers.☆82Updated last year
- PowerShell 'Hero': scripts for DFIR and automation with a PowerShell menu example.☆36Updated last year
- Automated forensics written in PowerShell☆34Updated 5 years ago
- ☆45Updated 2 years ago
- Azure AD Incident Response☆25Updated 3 years ago
- A WDAC configuration repository with the sole intention of enriching MDE☆28Updated 2 years ago
- Module to update the Krbtgt password☆46Updated last year
- ☆41Updated last year
- Manage user privileges on a local machine or view applied privileges on local or remote system☆105Updated 7 years ago
- Svendsen Tech's PowerShell nmap-like port scanner accepting IPv4 CIDR notation☆54Updated 2 years ago
- A collection of Windows software baseline notes with corresponding Windows Defender Application Control (WDAC) policies☆62Updated last year