☆54Mar 19, 2026Updated 7 months ago
Alternatives and similar repositories for hAcKtive-Directory-Forensics
Users that are interested in hAcKtive-Directory-Forensics are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- "Pure" powershell command (no dependencies, no special permissions etc') to retrieve change history in an AD group membership. relies on …☆12Nov 30, 2025Updated 11 months ago
- ☆12Jun 3, 2022Updated 4 years ago
- Track previous changes on specific AD accounts (users, computers) and Groups (online DC), even if event logs were wiped/not collected (e.…☆16Feb 25, 2025Updated last year
- ☆25Jun 4, 2025Updated last year
- Code & other materials from SEC-T 2022 talk "When SysAdmin & Hacker Unite: 21 One-Liners to make you convert from bash to Powershell"☆16Sep 17, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A collection of tools Neil and Andy have been working on released in one place and interlinked with previous tools☆87Jul 12, 2023Updated 3 years ago
- PowerShell 'Hero': scripts for DFIR and automation with a PowerShell menu example.☆37Jul 11, 2023Updated 3 years ago
- A set of PSScriptAnalyzer rules that help make it Good Enough!☆11Aug 26, 2026Updated 2 months ago
- Random tips and tricks RE: ransomware☆14Aug 17, 2021Updated 5 years ago
- Scripts to automate standing up C2 infra with firewall settings inside of DigitalOcean.☆18Feb 5, 2021Updated 5 years ago
- ☆16Nov 7, 2022Updated 3 years ago
- A PowerShell wrapper for certutil.exe☆22Oct 26, 2026Updated last week
- Group Policy Documentation Tools☆19Mar 23, 2023Updated 3 years ago
- Rolling Timeline for Incident Recorder.☆14Dec 4, 2023Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- PowerShell script useful for Incident Response and security/configuration baselines for Windows Vista and later☆20Jul 29, 2026Updated 3 months ago
- Utility tool to ingest CSV files into Kusto☆21Dec 17, 2025Updated 10 months ago
- USN Journal full path builder☆71Apr 16, 2026Updated 6 months ago
- Windows Scripts☆12Apr 2, 2020Updated 6 years ago
- Evtx Log (xml) Browser☆61Mar 12, 2023Updated 3 years ago
- PowerShell script helping Incident Responders discover potential adversary persistence mechanisms.☆343May 1, 2025Updated last year
- A quick and easy PowerShell script to collect a packet trace with option to convert .etl to .pcap.☆41Oct 26, 2022Updated 4 years ago
- A repository giving example use-cases for the Bitwarden Secrets Manager Ansible Integration.☆13Apr 3, 2026Updated 7 months ago
- Memory Baseliner is a script that can compare two windows memory images or perform frequency of occurrence / data stacking analysis on mu…☆59Jul 2, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆54May 14, 2024Updated 2 years ago
- SQL, IIS, Oh My...☆23Feb 24, 2025Updated last year
- Just a bunch of code snippets to identify and remediate common Active Directory Certificate Services issues.☆36Feb 13, 2024Updated 2 years ago
- ☆115Feb 13, 2024Updated 2 years ago
- Using PowerShell to quickly scan through the SYSVOL share for exposed credentials within auto logon policies.☆14Nov 30, 2022Updated 3 years ago
- msuserstats is a comprehensive Powershell tool to manage accounts from Microsoft Entra ID and Active Directory. It supports: a unified vi…☆42Mar 13, 2025Updated last year
- ☆18Apr 24, 2026Updated 6 months ago
- Query user sessions for the entire domain (Interactive/RDP etc), allowing you to query a Username and see all their logged on sessions, w…☆93Mar 22, 2025Updated last year
- POC code to crash Windows Event Logger Service☆27Oct 16, 2020Updated 6 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Simon's Windows Terminal & VSCode PowerShell Profile☆18Updated this week
- A repository of DFIR-related Mind Maps geared towards the visual learners!☆555Sep 2, 2022Updated 4 years ago
- Assess Windows OS for security misconfigurations and hardening opportunities.☆37Jul 20, 2024Updated 2 years ago
- Items related to the RedELK workshop given at security conferences☆29Sep 28, 2023Updated 3 years ago
- Credentials manager companion to the pre-set Exegol history file☆18Oct 25, 2026Updated last week
- A repository containing the research output from my GCFE Gold Paper which compared Windows 10 and Windows 11.☆27Jul 27, 2022Updated 4 years ago
- ☆40Aug 27, 2021Updated 5 years ago