Alternatives and similar repositories for PoSh-R2

Users that are interested in PoSh-R2 are comparing it to the libraries listed below

• Infocyte / PSHunt
  Powershell Threat Hunting Module
  ☆284Updated 8 years ago
• jepayneMSFT / WEFFLES
  Build a fast, free, and effective Threat Hunting/Incident Response Console with Windows Event Forwarding and PowerBI
  ☆202Updated 7 years ago
• mattifestation / CimSweep
  CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across al…
  ☆655Updated 5 years ago
• Invoke-IR / ACE
  Automated, Collection, and Enrichment Platform
  ☆325Updated 5 years ago
• Invoke-IR / Uproot
  Currently not updated for WMIEvent module...
  ☆261Updated 9 years ago
• darkoperator / Posh-Sysmon
  PowerShell module for creating and managing Sysinternals Sysmon config files.
  ☆213Updated 4 years ago
• gfoss / PSRecon
  PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted da…
  ☆487Updated 8 years ago
• mattifestation / PSSysmonTools
  Sysmon Tools for PowerShell
  ☆230Updated 6 years ago
• miriamxyra / EventList
  EventList
  ☆376Updated 4 years ago
• Asymmetric-InfoSec / Power-Response
  Powering Up Incident Response with Power-Response
  ☆63Updated 5 years ago
• AustralianCyberSecurityCentre / windows_event_logging
  Windows Event Forwarding subscriptions, configuration files and scripts that assist with implementing ACSC's protect publication, Technic…
  ☆224Updated 5 months ago
• darkoperator / Posh-VirusTotal
  PowerShell Module to interact with VirusTotal
  ☆121Updated 5 years ago
• MHaggis / hunt-detect-prevent
  Lists of sources and utilities utilized to hunt, detect and prevent evildoers.
  ☆166Updated 6 years ago
• utsecnet / PAW
  ☆315Updated 5 years ago
• nsacyber / AppLocker-Guidance
  Configuration guidance for implementing application whitelisting with AppLocker. #nsacyber
  ☆223Updated 4 months ago
• mandiant / ShimCacheParser
  ☆278Updated 2 years ago
• CrowdStrike / falcon-orchestrator
  CrowdStrike Falcon Orchestrator provides automated workflow and response capabilities
  ☆187Updated last year
• CredDefense / CredDefense
  Credential and Red Teaming Defense for Windows Environments
  ☆329Updated last year
• cottinghamd / HardeningAuditor
  Scripts for comparing Microsoft Windows compliance with the ASD 1709 & Office 2016 Hardening Guides
  ☆160Updated 5 years ago
• TonyPhipps / Meerkat
  A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.
  ☆464Updated 8 months ago
• bromiley / olaf
  Office365 Log Analysis Framework
  ☆81Updated 6 years ago
• adhdproject / adhdproject.github.io
  ☆200Updated 3 years ago
• LogRhythm-Labs / PIE
  The Phishing Intelligence Engine - An Active Defense PowerShell Framework for Phishing Defense with Office 365
  ☆180Updated 5 years ago
• nsacyber / Pass-the-Hash-Guidance
  Configuration guidance for implementing Pass-the-Hash mitigations. #nsacyber
  ☆200Updated 8 years ago
• JoeyRentenaar / Office-365-Extractor
  The Office 365 Extractor is a tool that allows for complete and reliable extraction of the Unified Audit Log (UAL)
  ☆159Updated 2 years ago
• orlikoski / CDQR
  The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted driv…
  ☆339Updated 3 years ago
• ubeeri / Invoke-UserSimulator
  Simulates common user behaviour on local and remote Windows hosts.
  ☆281Updated 7 years ago
• beahunt3r / Windows-Hunting
  ☆351Updated 4 years ago
• mbevilacqua / appcompatprocessor
  "Evolving AppCompat/AmCache data analysis beyond grep"
  ☆205Updated 3 years ago
• swannman / ircapabilities
  Incident Response Hierarchy of Needs
  ☆462Updated 2 years ago