Alternatives and similar repositories for PoSh-R2

Users that are interested in PoSh-R2 are comparing it to the libraries listed below

• Infocyte / PSHunt
  Powershell Threat Hunting Module
  ☆283Updated 8 years ago
• jepayneMSFT / WEFFLES
  Build a fast, free, and effective Threat Hunting/Incident Response Console with Windows Event Forwarding and PowerBI
  ☆203Updated 7 years ago
• mattifestation / CimSweep
  CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across al…
  ☆653Updated 5 years ago
• Invoke-IR / ACE
  Automated, Collection, and Enrichment Platform
  ☆325Updated 5 years ago
• darkoperator / Posh-Sysmon
  PowerShell module for creating and managing Sysinternals Sysmon config files.
  ☆208Updated 4 years ago
• Invoke-IR / Uproot
  Currently not updated for WMIEvent module...
  ☆262Updated 9 years ago
• mandiant / ShimCacheParser
  ☆276Updated 2 years ago
• AustralianCyberSecurityCentre / windows_event_logging
  Windows Event Forwarding subscriptions, configuration files and scripts that assist with implementing ACSC's protect publication, Technic…
  ☆220Updated 3 months ago
• mattifestation / PSSysmonTools
  Sysmon Tools for PowerShell
  ☆229Updated 6 years ago
• miriamxyra / EventList
  EventList
  ☆376Updated 4 years ago
• MalwareArchaeology / ARTHIR
  ATT&CK Remote Threat Hunting Incident Response
  ☆200Updated 5 months ago
• ubeeri / Invoke-UserSimulator
  Simulates common user behaviour on local and remote Windows hosts.
  ☆282Updated 7 years ago
• mbevilacqua / appcompatprocessor
  "Evolving AppCompat/AmCache data analysis beyond grep"
  ☆204Updated 3 years ago
• orlikoski / CDQR
  The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted driv…
  ☆337Updated 2 years ago
• CrowdStrike / falcon-orchestrator
  CrowdStrike Falcon Orchestrator provides automated workflow and response capabilities
  ☆186Updated last year
• MHaggis / hunt-detect-prevent
  Lists of sources and utilities utilized to hunt, detect and prevent evildoers.
  ☆165Updated 6 years ago
• gfoss / PSRecon
  PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted da…
  ☆486Updated 7 years ago
• JoeyRentenaar / Office-365-Extractor
  The Office 365 Extractor is a tool that allows for complete and reliable extraction of the Unified Audit Log (UAL)
  ☆159Updated 2 years ago
• bromiley / olaf
  Office365 Log Analysis Framework
  ☆82Updated 5 years ago
• utsecnet / PAW
  ☆314Updated 5 years ago
• CredDefense / CredDefense
  Credential and Red Teaming Defense for Windows Environments
  ☆330Updated 10 months ago
• beahunt3r / Windows-Hunting
  ☆350Updated 4 years ago
• cottinghamd / HardeningAuditor
  Scripts for comparing Microsoft Windows compliance with the ASD 1709 & Office 2016 Hardening Guides
  ☆159Updated 5 years ago
• nsacyber / AppLocker-Guidance
  Configuration guidance for implementing application whitelisting with AppLocker. #nsacyber
  ☆217Updated 2 months ago
• adhdproject / adhdproject.github.io
  ☆200Updated 3 years ago
• JPCERTCC / ToolAnalysisResultSheet
  Tool Analysis Result Sheet
  ☆353Updated 7 years ago
• SadProcessor / SomeStuff
  Some PowerShell Stuff
  ☆281Updated 2 years ago
• PSGumshoe / PSGumshoe
  ☆258Updated 6 months ago
• nsacyber / Pass-the-Hash-Guidance
  Configuration guidance for implementing Pass-the-Hash mitigations. #nsacyber
  ☆199Updated 8 years ago
• Cyb3rWard0g / Invoke-ATTACKAPI
  A PowerShell script to interact with the MITRE ATT&CK Framework via its own API
  ☆369Updated 6 years ago