Alternatives and similar repositories for PSReflect-Functions:

Users that are interested in PSReflect-Functions are comparing it to the libraries listed below

• mattifestation / PSReflect
  Easily define in-memory enums, structs, and Win32 functions in PowerShell
  ☆222Updated 6 years ago
• mattifestation / PSSysmonTools
  Sysmon Tools for PowerShell
  ☆229Updated 6 years ago
• zacbrown / PowerKrabsEtw
  PowerKrabsEtw is a PowerShell interface for doing real-time ETW tracing.
  ☆103Updated 4 years ago
• PSGumshoe / PSGumshoe
  ☆257Updated 5 months ago
• netwrix / poshkatz
  PowerShell module for Mimikatz
  ☆212Updated 5 years ago
• realparisi / WMI_Monitor
  Log newly created WMI consumers and processes to the Windows Application event log
  ☆124Updated 7 years ago
• mattifestation / DeviceGuardBypassMitigationRules
  A reference Device Guard code integrity policy consisting of FilePublisher deny rules for published Device Guard configuration bypasses
  ☆115Updated 7 years ago
• mattifestation / WDACPolicies
  A collection of Windows software baseline notes with corresponding Windows Defender Application Control (WDAC) policies
  ☆62Updated last year
• SadProcessor / SomeStuff
  Some PowerShell Stuff
  ☆281Updated 2 years ago
• jsecurity101 / Windows-API-To-Sysmon-Events
  A repository that maps API calls to Sysmon Event ID's.
  ☆119Updated 2 years ago
• gpoguy / GetVulnerableGPO
  PowerShell script to find 'vulnerable' security-related GPOs that should be hardended
  ☆198Updated 6 years ago
• darkoperator / Posh-Sysmon
  PowerShell module for creating and managing Sysinternals Sysmon config files.
  ☆207Updated 4 years ago
• palantir / exploitguard
  Documentation and supporting script sample for Windows Exploit Guard
  ☆156Updated 3 years ago
• proxb / PoshPrivilege
  Manage user privileges on a local machine or view applied privileges on local or remote system
  ☆107Updated 7 years ago
• matthewdunwoody / block-parser
  Parser for Windows PowerShell script block logs
  ☆95Updated 9 months ago
• api0cradle / PowerAL
  A Powershell module that helps you identify AppLocker weaknesses
  ☆168Updated 5 years ago
• JoeyRentenaar / Office-365-Extractor
  The Office 365 Extractor is a tool that allows for complete and reliable extraction of the Unified Audit Log (UAL)
  ☆159Updated 2 years ago
• mattifestation / WDACTools
  A PowerShell module to facilitate building, configuring, deploying, and auditing Windows Defender Application Control (WDAC) policies
  ☆215Updated 3 years ago
• Invoke-IR / Uproot
  Currently not updated for WMIEvent module...
  ☆263Updated 9 years ago
• secabstraction / WmiSploit
  ☆164Updated 9 years ago
• cobbr / PSAmsi
  PSAmsi is a tool for auditing and defeating AMSI signatures.
  ☆390Updated 7 years ago
• jdu2600 / Windows10EtwEvents
  Events from all manifest-based and mof-based ETW providers across Windows 10 versions
  ☆295Updated last year
• endgameinc / ClrGuard
  ☆216Updated 7 years ago
• OTRF / Set-AuditRule
  Useful access control entries (ACE) on system access control list (SACL) of securable objects to find potential adversarial activity
  ☆90Updated 3 years ago
• leechristensen / Random
  Assorted scripts and one off things
  ☆268Updated 8 months ago
• vletoux / SmbScanner
  Smb Scanner from PingCastle
  ☆124Updated 6 years ago
• cyberark / RiskySPN
  Detect and abuse risky SPNs
  ☆262Updated 7 years ago
• vletoux / NTLMInjector
  In case you didn't now how to restore the user password after a password reset (get the previous hash with DCSync)
  ☆167Updated 7 years ago
• cobbr / InsecurePowerShell
  InsecurePowerShell is PowerShell with some security features removed.
  ☆104Updated 7 years ago
• ernw / Windows-Insight
  The content of this repository aims to assist efforts on analysing inner working principles, functionalities, and properties of the Micro…
  ☆151Updated 4 years ago