Alternatives and similar repositories for DARKSURGEON:

Users that are interested in DARKSURGEON are comparing it to the libraries listed below

• Invoke-IR / ACE
  Automated, Collection, and Enrichment Platform
  ☆324Updated 5 years ago
• mattifestation / CimSweep
  CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across al…
  ☆652Updated 5 years ago
• Invoke-IR / Uproot
  Currently not updated for WMIEvent module...
  ☆263Updated 9 years ago
• chenerlich / FCL
  FCL (Fileless Command Lines) - Known command lines of fileless malicious executions
  ☆466Updated 3 years ago
• l0ss / Grouper
  A PowerShell script for helping to find vulnerable settings in AD Group Policy. (deprecated, use Grouper2 instead!)
  ☆739Updated 6 years ago
• francisck / DanderSpritz_lab
  A fully functional DanderSpritz lab in 2 commands
  ☆424Updated 5 years ago
• GoFetchAD / GoFetch
  GoFetch is a tool to automatically exercise an attack plan generated by the BloodHound application.
  ☆633Updated 7 years ago
• A-mIn3 / WINspect
  Powershell-based Windows Security Auditing Toolbox
  ☆576Updated 6 years ago
• SadProcessor / SomeStuff
  Some PowerShell Stuff
  ☆282Updated 2 years ago
• Cyb3rWard0g / Invoke-ATTACKAPI
  A PowerShell script to interact with the MITRE ATT&CK Framework via its own API
  ☆367Updated 6 years ago
• p3nt4 / Invoke-Piper
  Forward local or remote tcp ports through SMB pipes.
  ☆295Updated 4 years ago
• JohnLaTwC / PyPowerShellXray
  Python script to decode common encoded PowerShell scripts
  ☆216Updated 6 years ago
• CredDefense / CredDefense
  Credential and Red Teaming Defense for Windows Environments
  ☆327Updated 8 months ago
• xorrior / RemoteRecon
  Remote Recon and Collection
  ☆448Updated 7 years ago
• ubeeri / Invoke-UserSimulator
  Simulates common user behaviour on local and remote Windows hosts.
  ☆282Updated 6 years ago
• mandiant / ShimCacheParser
  ☆275Updated last year
• Infocyte / PSHunt
  Powershell Threat Hunting Module
  ☆283Updated 8 years ago
• lorentzenman / sheepl
  Sheepl : Creating realistic user behaviour for supporting tradecraft development within lab environments
  ☆395Updated last year
• beahunt3r / Windows-Hunting
  ☆349Updated 4 years ago
• adhdproject / adhdproject.github.io
  ☆198Updated 3 years ago
• THIBER-ORG / userline
  Query and report user logons relations from MS Windows Security Events
  ☆242Updated 6 years ago
• JavelinNetworks / HoneypotBuster
  ☆281Updated 7 years ago
• unfetter-discover / unfetter-analytic
  Main Build directory
  ☆179Updated 5 years ago
• two06 / Inception
  Provides In-memory compilation and reflective loading of C# apps for AV evasion.
  ☆368Updated last year
• nsacyber / Pass-the-Hash-Guidance
  Configuration guidance for implementing Pass-the-Hash mitigations. #nsacyber
  ☆198Updated 8 years ago
• theflakes / Ultimate-Forensics-VM
  Evolving directions on building the best Open Source Forensics VM
  ☆157Updated 6 years ago
• mattifestation / PSSysmonTools
  Sysmon Tools for PowerShell
  ☆229Updated 6 years ago
• outflanknl / Invoke-ADLabDeployer
  Automated deployment of Windows and Active Directory test lab networks. Useful for red and blue teams.
  ☆486Updated 6 years ago
• WiredPulse / PoSh-R2
  PowerShell - Rapid Response... For the incident responder in you!
  ☆298Updated 5 years ago
• nettitude / PoshC2_Old
  Powershell C2 Server and Implants
  ☆574Updated 5 years ago