Alternatives and similar repositories for PoSh-R2:

Users that are interested in PoSh-R2 are comparing it to the libraries listed below

• Infocyte / PSHunt
  Powershell Threat Hunting Module
  ☆283Updated 8 years ago
• mattifestation / CimSweep
  CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across al…
  ☆652Updated 5 years ago
• darkoperator / Posh-Sysmon
  PowerShell module for creating and managing Sysinternals Sysmon config files.
  ☆207Updated 3 years ago
• Invoke-IR / Uproot
  Currently not updated for WMIEvent module...
  ☆263Updated 9 years ago
• Invoke-IR / ACE
  Automated, Collection, and Enrichment Platform
  ☆324Updated 5 years ago
• jepayneMSFT / WEFFLES
  Build a fast, free, and effective Threat Hunting/Incident Response Console with Windows Event Forwarding and PowerBI
  ☆203Updated 7 years ago
• mattifestation / PSSysmonTools
  Sysmon Tools for PowerShell
  ☆229Updated 6 years ago
• SadProcessor / SomeStuff
  Some PowerShell Stuff
  ☆282Updated 2 years ago
• gfoss / PSRecon
  PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted da…
  ☆484Updated 7 years ago
• CredDefense / CredDefense
  Credential and Red Teaming Defense for Windows Environments
  ☆327Updated 8 months ago
• nsacyber / AppLocker-Guidance
  Configuration guidance for implementing application whitelisting with AppLocker. #nsacyber
  ☆211Updated 2 weeks ago
• PSGumshoe / PSGumshoe
  ☆256Updated 3 months ago
• AustralianCyberSecurityCentre / windows_event_logging
  Windows Event Forwarding subscriptions, configuration files and scripts that assist with implementing ACSC's protect publication, Technic…
  ☆217Updated last month
• nsacyber / Pass-the-Hash-Guidance
  Configuration guidance for implementing Pass-the-Hash mitigations. #nsacyber
  ☆198Updated 8 years ago
• MHaggis / hunt-detect-prevent
  Lists of sources and utilities utilized to hunt, detect and prevent evildoers.
  ☆165Updated 6 years ago
• Cyb3rWard0g / Invoke-ATTACKAPI
  A PowerShell script to interact with the MITRE ATT&CK Framework via its own API
  ☆367Updated 6 years ago
• mandiant / ShimCacheParser
  ☆275Updated last year
• utsecnet / PAW
  ☆313Updated 5 years ago
• darkoperator / Posh-SecMod
  PowerShell Module with Security cmdlets for security work
  ☆439Updated 5 years ago
• darkoperator / Posh-VirusTotal
  PowerShell Module to interact with VirusTotal
  ☆119Updated 5 years ago
• gpoguy / GetVulnerableGPO
  PowerShell script to find 'vulnerable' security-related GPOs that should be hardended
  ☆197Updated 6 years ago
• outflanknl / Invoke-ADLabDeployer
  Automated deployment of Windows and Active Directory test lab networks. Useful for red and blue teams.
  ☆486Updated 6 years ago
• MalwareArchaeology / ARTHIR
  ATT&CK Remote Threat Hunting Incident Response
  ☆200Updated 3 months ago
• JoeyRentenaar / Office-365-Extractor
  The Office 365 Extractor is a tool that allows for complete and reliable extraction of the Unified Audit Log (UAL)
  ☆159Updated last year
• beahunt3r / Windows-Hunting
  ☆349Updated 4 years ago
• adhdproject / adhdproject.github.io
  ☆198Updated 3 years ago
• CrowdStrike / falcon-orchestrator
  CrowdStrike Falcon Orchestrator provides automated workflow and response capabilities
  ☆186Updated last year
• cottinghamd / HardeningAuditor
  Scripts for comparing Microsoft Windows compliance with the ASD 1709 & Office 2016 Hardening Guides
  ☆159Updated 5 years ago
• WiredPulse / PowerShell
  A series of scripts
  ☆98Updated 3 years ago
• danielbohannon / Revoke-Obfuscation
  PowerShell Obfuscation Detection Framework
  ☆730Updated last year