jaredcatkinson / PSReflect-Functions
Module to provide PowerShell functions that abstract Win32 API functions
☆241Updated 7 months ago
Alternatives and similar repositories for PSReflect-Functions:
Users that are interested in PSReflect-Functions are comparing it to the libraries listed below
- Easily define in-memory enums, structs, and Win32 functions in PowerShell☆218Updated 6 years ago
- Sysmon Tools for PowerShell☆230Updated 6 years ago
- PowerShell module for Mimikatz☆212Updated 5 years ago
- ☆255Updated last month
- PowerKrabsEtw is a PowerShell interface for doing real-time ETW tracing.☆103Updated 4 years ago
- Log newly created WMI consumers and processes to the Windows Application event log☆124Updated 6 years ago
- PowerShell module for creating and managing Sysinternals Sysmon config files.☆207Updated 3 years ago
- Documentation and supporting script sample for Windows Exploit Guard☆148Updated 3 years ago
- Some PowerShell Stuff☆281Updated 2 years ago
- Manage user privileges on a local machine or view applied privileges on local or remote system☆106Updated 7 years ago
- PowerShell script to find 'vulnerable' security-related GPOs that should be hardended☆196Updated 6 years ago
- Executes PowerShell from an unmanaged process☆476Updated 8 years ago
- A Powershell module that helps you identify AppLocker weaknesses☆165Updated 4 years ago
- A repository that maps API calls to Sysmon Event ID's.☆117Updated 2 years ago
- A PowerShell module to facilitate building, configuring, deploying, and auditing Windows Defender Application Control (WDAC) policies☆207Updated 2 years ago
- A collection of Windows software baseline notes with corresponding Windows Defender Application Control (WDAC) policies☆61Updated last year
- Assorted scripts and one off things☆262Updated 4 months ago
- PSAmsi is a tool for auditing and defeating AMSI signatures.☆388Updated 6 years ago
- Events from all manifest-based and mof-based ETW providers across Windows 10 versions☆279Updated 8 months ago
- Parser for Windows PowerShell script block logs☆94Updated 5 months ago
- A reference Device Guard code integrity policy consisting of FilePublisher deny rules for published Device Guard configuration bypasses☆114Updated 7 years ago
- Currently not updated for WMIEvent module...☆261Updated 8 years ago
- Detect and abuse risky SPNs☆260Updated 7 years ago
- PoSh BloodHound Dog Whisperer☆188Updated last year
- PowerSCCM - PowerShell module to interact with SCCM deployments☆347Updated 2 years ago
- Useful access control entries (ACE) on system access control list (SACL) of securable objects to find potential adversarial activity☆89Updated 2 years ago
- ☆164Updated 9 years ago
- ☆213Updated 6 years ago
- Neutering Sysmon via driver unload☆224Updated 2 years ago
- A series of scripts☆98Updated 3 years ago