Alternatives and similar repositories for DARKSURGEON

Users that are interested in DARKSURGEON are comparing it to the libraries listed below

• Invoke-IR / ACE
  Automated, Collection, and Enrichment Platform
  ☆325Updated 5 years ago
• Invoke-IR / Uproot
  Currently not updated for WMIEvent module...
  ☆261Updated 9 years ago
• l0ss / Grouper
  A PowerShell script for helping to find vulnerable settings in AD Group Policy. (deprecated, use Grouper2 instead!)
  ☆739Updated 6 years ago
• A-mIn3 / WINspect
  Powershell-based Windows Security Auditing Toolbox
  ☆575Updated 6 years ago
• mattifestation / CimSweep
  CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across al…
  ☆655Updated 5 years ago
• francisck / DanderSpritz_lab
  A fully functional DanderSpritz lab in 2 commands
  ☆432Updated 6 years ago
• Cyb3rWard0g / Invoke-ATTACKAPI
  A PowerShell script to interact with the MITRE ATT&CK Framework via its own API
  ☆369Updated 6 years ago
• WiredPulse / PoSh-R2
  PowerShell - Rapid Response... For the incident responder in you!
  ☆300Updated 5 years ago
• nsacyber / Pass-the-Hash-Guidance
  Configuration guidance for implementing Pass-the-Hash mitigations. #nsacyber
  ☆200Updated 8 years ago
• LogRhythm-Labs / PIE
  The Phishing Intelligence Engine - An Active Defense PowerShell Framework for Phishing Defense with Office 365
  ☆180Updated 5 years ago
• ubeeri / Invoke-UserSimulator
  Simulates common user behaviour on local and remote Windows hosts.
  ☆281Updated 7 years ago
• unfetter-discover / unfetter-analytic
  Main Build directory
  ☆179Updated 6 years ago
• beahunt3r / Windows-Hunting
  ☆351Updated 4 years ago
• SadProcessor / SomeStuff
  Some PowerShell Stuff
  ☆281Updated 3 years ago
• outflanknl / Invoke-ADLabDeployer
  Automated deployment of Windows and Active Directory test lab networks. Useful for red and blue teams.
  ☆491Updated 6 years ago
• JohnLaTwC / PyPowerShellXray
  Python script to decode common encoded PowerShell scripts
  ☆216Updated 7 years ago
• codeexpress / respounder
  Respounder detects presence of responder in the network.
  ☆317Updated 6 years ago
• chenerlich / FCL
  FCL (Fileless Command Lines) - Known command lines of fileless malicious executions
  ☆472Updated 4 years ago
• GoFetchAD / GoFetch
  GoFetch is a tool to automatically exercise an attack plan generated by the BloodHound application.
  ☆635Updated 8 years ago
• adhdproject / adhdproject.github.io
  ☆200Updated 3 years ago
• CredDefense / CredDefense
  Credential and Red Teaming Defense for Windows Environments
  ☆329Updated last year
• Infocyte / PSHunt
  Powershell Threat Hunting Module
  ☆284Updated 8 years ago
• THIBER-ORG / userline
  Query and report user logons relations from MS Windows Security Events
  ☆243Updated 6 years ago
• JavelinNetworks / HoneypotBuster
  ☆283Updated 7 years ago
• randomuserid / Adama
  Searches For Threat Hunting and Security Analytics
  ☆241Updated 4 months ago
• p3nt4 / Invoke-Piper
  Forward local or remote tcp ports through SMB pipes.
  ☆295Updated 4 years ago
• orlikoski / Skadi
  Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux
  ☆500Updated 2 years ago
• CrowdStrike / falcon-orchestrator
  CrowdStrike Falcon Orchestrator provides automated workflow and response capabilities
  ☆187Updated last year
• RedSiege / WMIOps
  This repo is for WMIOps, a powershell script which uses WMI for various purposes across a network.
  ☆384Updated last year
• gfoss / PSRecon
  PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted da…
  ☆487Updated 8 years ago