Alternatives and similar repositories for PoSh-R2

Users that are interested in PoSh-R2 are comparing it to the libraries listed below

• Infocyte / PSHunt
  Powershell Threat Hunting Module
  ☆287Updated 9 years ago
• jepayneMSFT / WEFFLES
  Build a fast, free, and effective Threat Hunting/Incident Response Console with Windows Event Forwarding and PowerBI
  ☆201Updated 7 years ago
• mattifestation / CimSweep
  CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across al…
  ☆660Updated 6 years ago
• Invoke-IR / ACE
  Automated, Collection, and Enrichment Platform
  ☆324Updated 6 years ago
• Invoke-IR / Uproot
  Currently not updated for WMIEvent module...
  ☆263Updated 9 years ago
• darkoperator / Posh-Sysmon
  PowerShell module for creating and managing Sysinternals Sysmon config files.
  ☆214Updated 4 years ago
• mattifestation / PSSysmonTools
  Sysmon Tools for PowerShell
  ☆231Updated 7 years ago
• AustralianCyberSecurityCentre / windows_event_logging
  Windows Event Forwarding subscriptions, configuration files and scripts that assist with implementing ACSC's protect publication, Technic…
  ☆227Updated 9 months ago
• utsecnet / PAW
  ☆318Updated 5 years ago
• cottinghamd / HardeningAuditor
  Scripts for comparing Microsoft Windows compliance with the ASD 1709 & Office 2016 Hardening Guides
  ☆160Updated 5 years ago
• Asymmetric-InfoSec / Power-Response
  Powering Up Incident Response with Power-Response
  ☆63Updated 5 years ago
• mandiant / ShimCacheParser
  ☆280Updated 2 years ago
• miriamxyra / EventList
  EventList
  ☆377Updated 4 years ago
• MHaggis / hunt-detect-prevent
  Lists of sources and utilities utilized to hunt, detect and prevent evildoers.
  ☆166Updated 6 years ago
• adhdproject / adhdproject.github.io
  ☆201Updated 4 years ago
• gfoss / PSRecon
  PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted da…
  ☆489Updated 8 years ago
• nsacyber / AppLocker-Guidance
  Configuration guidance for implementing application whitelisting with AppLocker. #nsacyber
  ☆226Updated last month
• darkoperator / Posh-VirusTotal
  PowerShell Module to interact with VirusTotal
  ☆121Updated 5 years ago
• CredDefense / CredDefense
  Credential and Red Teaming Defense for Windows Environments
  ☆329Updated last year
• SadProcessor / SomeStuff
  Some PowerShell Stuff
  ☆281Updated 3 years ago
• bromiley / olaf
  Office365 Log Analysis Framework
  ☆81Updated 6 years ago
• cryps1s / DARKSURGEON
  DARKSURGEON is a Windows packer project to empower incident response, digital forensics, malware analysis, and network defense.
  ☆468Updated 5 years ago
• ubeeri / Invoke-UserSimulator
  Simulates common user behaviour on local and remote Windows hosts.
  ☆281Updated 7 years ago
• darkoperator / Posh-SecMod
  PowerShell Module with Security cmdlets for security work
  ☆448Updated 5 years ago
• JoeyRentenaar / Office-365-Extractor
  The Office 365 Extractor is a tool that allows for complete and reliable extraction of the Unified Audit Log (UAL)
  ☆160Updated 2 years ago
• LogRhythm-Labs / PIE
  The Phishing Intelligence Engine - An Active Defense PowerShell Framework for Phishing Defense with Office 365
  ☆181Updated 5 years ago
• nsacyber / Pass-the-Hash-Guidance
  Configuration guidance for implementing Pass-the-Hash mitigations. #nsacyber
  ☆200Updated 9 years ago
• beahunt3r / Windows-Hunting
  ☆349Updated 4 years ago
• WiredPulse / BlueSpectrum
  An IOC framework written in PowerShell
  ☆19Updated 8 years ago
• mbevilacqua / appcompatprocessor
  "Evolving AppCompat/AmCache data analysis beyond grep"
  ☆206Updated 4 years ago