Alternatives and similar repositories for Posh-Sysmon

Users that are interested in Posh-Sysmon are comparing it to the libraries listed below

• mattifestation / PSSysmonTools
  Sysmon Tools for PowerShell
  ☆229Updated 6 years ago
• Invoke-IR / Uproot
  Currently not updated for WMIEvent module...
  ☆262Updated 9 years ago
• gpoguy / GetVulnerableGPO
  PowerShell script to find 'vulnerable' security-related GPOs that should be hardended
  ☆200Updated 7 years ago
• Infocyte / PSHunt
  Powershell Threat Hunting Module
  ☆284Updated 8 years ago
• jepayneMSFT / WEFFLES
  Build a fast, free, and effective Threat Hunting/Incident Response Console with Windows Event Forwarding and PowerBI
  ☆203Updated 7 years ago
• MotiBa / Sysmon
  Sysmon configuration
  ☆65Updated 6 years ago
• darkoperator / Posh-VirusTotal
  PowerShell Module to interact with VirusTotal
  ☆121Updated 5 years ago
• MHaggis / hunt-detect-prevent
  Lists of sources and utilities utilized to hunt, detect and prevent evildoers.
  ☆166Updated 6 years ago
• JoeyRentenaar / Office-365-Extractor
  The Office 365 Extractor is a tool that allows for complete and reliable extraction of the Unified Audit Log (UAL)
  ☆159Updated 2 years ago
• Invoke-IR / ACE
  Automated, Collection, and Enrichment Platform
  ☆325Updated 5 years ago
• realparisi / WMI_Monitor
  Log newly created WMI consumers and processes to the Windows Application event log
  ☆124Updated 7 years ago
• OneLogicalMyth / Automated-AD-Setup
  A PowerShell script that aims to have a fully configured domain built in under 10 minutes, but also apply security configuration and hard…
  ☆198Updated 4 years ago
• tenable / Posh-Nessus
  PowerShell Module for automating Tenable Nessus Vulnerability Scanner.
  ☆88Updated 2 years ago
• nsacyber / AppLocker-Guidance
  Configuration guidance for implementing application whitelisting with AppLocker. #nsacyber
  ☆218Updated 3 months ago
• WiredPulse / PoSh-R2
  PowerShell - Rapid Response... For the incident responder in you!
  ☆300Updated 5 years ago
• cottinghamd / HardeningAuditor
  Scripts for comparing Microsoft Windows compliance with the ASD 1709 & Office 2016 Hardening Guides
  ☆159Updated 5 years ago
• SadProcessor / SomeStuff
  Some PowerShell Stuff
  ☆281Updated 3 years ago
• WiredPulse / PowerShell
  A series of scripts
  ☆100Updated 3 years ago
• PSGumshoe / PSGumshoe
  ☆258Updated 6 months ago
• mattifestation / WinPETools
  A module designed to simplify the creation, customization, and deployment of bootable Windows Preinstallation Environment (WinPE) images.
  ☆151Updated 9 years ago
• utsecnet / PAW
  ☆315Updated 5 years ago
• AustralianCyberSecurityCentre / windows_event_logging
  Windows Event Forwarding subscriptions, configuration files and scripts that assist with implementing ACSC's protect publication, Technic…
  ☆221Updated 4 months ago
• Invoke-IR / WmiEvent
  A PowerShell module to abstract the complexities of Permanent WMI Event Subscriptions
  ☆55Updated 9 years ago
• oneoffdallas / check_ioc
  Check_ioc is a script to check for various, selectable indicators of compromise on Windows systems via PowerShell and Event Logs. It was …
  ☆77Updated 7 years ago
• leeberg / BlueHive
  PowerShell based Active Directory Honey User Account Management with Universal Dashboards
  ☆142Updated 5 years ago
• nsacyber / Pass-the-Hash-Guidance
  Configuration guidance for implementing Pass-the-Hash mitigations. #nsacyber
  ☆199Updated 8 years ago
• mgreen27 / Invoke-LiveResponse
  Invoke-LiveResponse
  ☆148Updated 3 years ago
• CrowdStrike / falcon-orchestrator
  CrowdStrike Falcon Orchestrator provides automated workflow and response capabilities
  ☆186Updated last year
• giMini / NOAH
  PowerShell No Agent Hunting
  ☆110Updated 7 years ago
• zacbrown / PowerKrabsEtw
  PowerKrabsEtw is a PowerShell interface for doing real-time ETW tracing.
  ☆103Updated 4 years ago