PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted data, hashes PowerShell and various system properties, and sends the data off to the security team. The data can be pushed to a share, sent over email, or retained locally.
☆494Jul 29, 2017Updated 9 years ago
Alternatives and similar repositories for PSRecon
Users that are interested in PSRecon are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- PowerForensics provides an all in one platform for live disk forensic analysis☆1,445Nov 16, 2023Updated 2 years ago
- CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across al…☆657Aug 19, 2019Updated 7 years ago
- A Powershell incident response framework☆1,668Nov 22, 2022Updated 3 years ago
- Powershell Threat Hunting Module☆292Sep 21, 2016Updated 10 years ago
- A PowerShell Module Dedicated to Reverse Engineering☆902Aug 20, 2021Updated 5 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Exploit the credentials present in files and memory☆846May 25, 2023Updated 3 years ago
- Currently not updated for WMIEvent module...☆262Feb 23, 2016Updated 10 years ago
- This repo is for WMIOps, a powershell script which uses WMI for various purposes across a network.☆383Jun 25, 2024Updated 2 years ago
- Query and report user logons relations from MS Windows Security Events☆242Aug 9, 2018Updated 8 years ago
- PowerShell Runspace Post Exploitation Toolkit☆1,552Aug 2, 2019Updated 7 years ago
- A PowerShell based utility for the creation of malicious Office macro documents.☆1,109Nov 3, 2017Updated 8 years ago
- A post-exploitation powershell tool for extracting juicy info from memory.☆1,867Jun 28, 2024Updated 2 years ago
- ☆516Jan 26, 2021Updated 5 years ago
- Incident Response Forensic Framework☆607Nov 20, 2019Updated 6 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- This is a PowerShell based tool that is designed to act like a RAT. Its interface is that of a shell where any command that is supported …☆868Jun 25, 2024Updated 2 years ago
- A PowerShell TCP/IP swiss army knife.☆581May 1, 2017Updated 9 years ago
- GoFetch is a tool to automatically exercise an attack plan generated by the BloodHound application.☆632Jun 20, 2017Updated 9 years ago
- A script for advanced discovery of Privileged Accounts - includes Shadow Admins☆828Sep 9, 2019Updated 7 years ago
- Collection of PowerShell scripts☆450Dec 18, 2017Updated 8 years ago
- Powershell-based Windows Security Auditing Toolbox☆571Jan 9, 2019Updated 7 years ago
- Powershell module to assist in attacking Exchange/Outlook Web Access☆181Sep 22, 2016Updated 10 years ago
- Sources, configuration and how to detect evil things utilizing Microsoft Sysmon.☆946Dec 12, 2023Updated 2 years ago
- Automated, Collection, and Enrichment Platform☆324Nov 14, 2019Updated 6 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Remote Recon and Collection☆461Nov 23, 2017Updated 8 years ago
- This Powershell script will generate a malicious Microsoft Office document with a specified payload and persistence method.☆687Oct 27, 2016Updated 10 years ago
- Random Tools☆852Oct 20, 2022Updated 4 years ago
- PowerShell Obfuscation Detection Framework☆757Dec 1, 2023Updated 2 years ago
- ☆434May 3, 2023Updated 3 years ago
- Web interface for the Volatility Memory Forensics Framework☆258Nov 21, 2017Updated 8 years ago
- PowerTools is a collection of PowerShell projects with a focus on offensive operations.☆2,210Dec 28, 2021Updated 4 years ago
- PowerShell No Agent Hunting☆111Apr 23, 2018Updated 8 years ago
- PowerShell Module with Security cmdlets for security work☆445Feb 27, 2020Updated 6 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- RedSnarf is a pen-testing / red-teaming tool for Windows environments☆1,220Sep 14, 2020Updated 6 years ago
- The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted driv…☆347Jun 25, 2022Updated 4 years ago
- A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.☆483Nov 15, 2024Updated last year
- My musings with PowerShell☆2,738Nov 19, 2021Updated 4 years ago
- Powershell C2 Server and Implants☆574Nov 11, 2019Updated 6 years ago
- VOYEUR's main purpose is to generate a fast (and pretty) Active Directory report. The tool is developed entirely in PowerShell (a powerfu…☆158Mar 8, 2017Updated 9 years ago
- Empire is a PowerShell and Python post-exploitation agent.☆7,846Jan 19, 2020Updated 6 years ago