Alternatives and similar repositories for WMIMon:

Users that are interested in WMIMon are comparing it to the libraries listed below

• mattifestation / WDACTools
  A PowerShell module to facilitate building, configuring, deploying, and auditing Windows Defender Application Control (WDAC) policies
  ☆210Updated 2 years ago
• libyal / winreg-kb
  Windows Registry Knowledge Base
  ☆170Updated 3 months ago
• jdu2600 / Windows10EtwEvents
  Events from all manifest-based and mof-based ETW providers across Windows 10 versions
  ☆283Updated 8 months ago
• hfiref0x / SXSEXP
  Expand compressed files from WinSxS folder
  ☆152Updated 7 months ago
• MicrosoftDocs / WDAC-Toolkit
  Documentation and tools to access Windows Defender Application Control (WDAC) technology.
  ☆211Updated 2 weeks ago
• Harvester57 / Security-ADMX
  Custom ADMX template focused on hardening Windows 10 & Windows 11 systems
  ☆77Updated last month
• jaredcatkinson / PSReflect-Functions
  Module to provide PowerShell functions that abstract Win32 API functions
  ☆241Updated 7 months ago
• EricZimmerman / Prefetch
  Windows Prefetch parser. Supports all known versions from Windows XP to Windows 10.
  ☆111Updated 3 weeks ago
• 0xeb / WinTools
  A collection of free miscellaneous Windows tools
  ☆129Updated 5 months ago
• riverar / messageanalyzer-archive
  Microsoft Message Analyzer EOL Archive
  ☆158Updated 5 years ago
• mattifestation / PSSysmonTools
  Sysmon Tools for PowerShell
  ☆230Updated 6 years ago
• mattifestation / WDACPolicies
  A collection of Windows software baseline notes with corresponding Windows Defender Application Control (WDAC) policies
  ☆61Updated last year
• kacos2000 / Win10
  Win 10/11 related research
  ☆181Updated last year
• mattifestation / BCD
  BCD is a module to interact with boot configuration data (BCD) either locally or remotely using the ROOT/WMI:Bcd* WMI classes. The functi…
  ☆60Updated 4 years ago
• AaronMargosis / Aaron-Margosis-SysNocturnals-Tools
  A set of troubleshooting, diagnostic, and information utilities for Windows
  ☆52Updated 3 months ago
• repnz / etw-providers-docs
  Document ETW providers
  ☆217Updated 4 years ago
• kacos2000 / WindowsTimeline
  Windows 10 (v1803+) ActivitiesCache.db parsers (SQLite, PowerShell, .EXE)
  ☆181Updated last year
• ion-storm / sysmon-edr
  Sysmon EDR POC Build within Powershell to prove ability.
  ☆218Updated 3 years ago
• mattifestation / DeviceGuardBypassMitigationRules
  A reference Device Guard code integrity policy consisting of FilePublisher deny rules for published Device Guard configuration bypasses
  ☆114Updated 7 years ago
• EricZimmerman / Registry
  Full featured, offline Registry parser in C#
  ☆225Updated 3 weeks ago
• CSS-Windows / WindowsDiag
  Windows Diagnostics, Data Collection and Analysis tools
  ☆164Updated 3 years ago
• guyrleech / General-Scripts
  Scripts for diagnosis, troubleshooting, automation, etc.
  ☆88Updated 5 months ago
• palantir / exploitguard
  Documentation and supporting script sample for Windows Exploit Guard
  ☆148Updated 3 years ago
• zodiacon / EtwExplorer
  View ETW Provider manifest
  ☆450Updated 2 months ago
• gunnarhaslinger / Windows-Defender-Exploit-Guard-Configuration
  Configure Windows Defender ExploitGuard, Reset all ProcessMitigation, Import clean recommended Baseline Configuration
  ☆40Updated 3 years ago
• jcwalker / WiFiProfileManagement
  Module used for management of wireless profiles
  ☆94Updated last week
• libyal / libfwsi
  Library to access the Windows Shell Item format
  ☆68Updated 6 months ago
• jschicht / RawCopy
  Commandline low level file extractor for NTFS
  ☆278Updated 5 years ago
• cyberark / RPCMon
  RPC Monitor tool based on Event Tracing for Windows
  ☆334Updated 5 months ago
• kacos2000 / MFT_Browser
  $MFT directory tree reconstruction & FILE record info
  ☆296Updated 3 months ago