TonyPhipps / Powershell
Tony's collection of powershell scripts, typically geared toward cybersec
☆32Updated last month
Related projects ⓘ
Alternatives and complementary repositories for Powershell
- Little PowerShell module to extract PowerShell scripts that no longer exists on disk but were run and are still in Event Logs.☆40Updated 3 years ago
- Microsoft GPO Readiness Lateral Movement Detection Tool☆16Updated last year
- Build a domain with three quick PowerShell scripts!☆28Updated 4 years ago
- PowerSponse is a PowerShell module focused on targeted containment and remediation during incident response.☆38Updated 2 years ago
- 🔎 Use urlscan.io with PowerShell!☆32Updated 3 years ago
- ☆48Updated 4 years ago
- Defensive-oriented Active Directory enumeration☆23Updated 8 years ago
- PowerShell script useful for Incident Response and security/configuration baselines for Windows Vista and later☆20Updated 8 years ago
- A Windows PowerShell & PowerShell Core Module to calculate a CVSS3 Score based on a Vector string☆12Updated last year
- incident response scripts☆18Updated 5 years ago
- A series of scripts☆97Updated 3 years ago
- Azure Sentinel Template parser☆15Updated 4 years ago
- Builds a hashmap of AD NTLM hashes/usernames and iterates through a second list of hashes checking for the existence of each entry in the…☆77Updated 4 years ago
- Simple Powershell scripts to collect all Windows Event Logs from a host and parse them into one CSV timeline.☆33Updated 6 years ago
- Automated forensics written in PowerShell☆34Updated 5 years ago
- AdmPwd.E client and support tools☆31Updated 4 years ago
- This repository contains a collection of PowerShell tools that can be utilized to protect and defend an environment based on the recommen…☆48Updated 4 months ago
- This repository was created to aid in the deployment/maintenance of the Sysmon service on a large number of computers.☆82Updated last year
- Finds event logs between two time points. Useful for helpdesk/support/malware analysis.☆43Updated 5 years ago
- Find accounts using common and default passwords in Active Directory.☆65Updated 5 years ago
- ☆40Updated last year
- PowerShell Script for Agentless Incident Response☆25Updated 6 years ago
- A collection of Windows software baseline notes with corresponding Windows Defender Application Control (WDAC) policies☆60Updated 11 months ago
- ☆31Updated 4 years ago
- PowerShell Module to interact with VirusTotal☆119Updated 4 years ago
- Azure AD Incident Response☆24Updated 3 years ago
- ☆45Updated last year
- A collection of hunting and blue team scripts. Mostly others, some my own.☆38Updated last year