Alternatives and similar repositories for CimSweep

Users that are interested in CimSweep are comparing it to the libraries listed below

• gfoss / PSRecon
  PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted da…
  ☆488Updated 8 years ago
• WiredPulse / PoSh-R2
  PowerShell - Rapid Response... For the incident responder in you!
  ☆301Updated 6 years ago
• darkoperator / Posh-SecMod
  PowerShell Module with Security cmdlets for security work
  ☆448Updated 5 years ago
• Invoke-IR / Uproot
  Currently not updated for WMIEvent module...
  ☆263Updated 9 years ago
• Invoke-IR / PowerForensics
  PowerForensics provides an all in one platform for live disk forensic analysis
  ☆1,418Updated last year
• ANSSI-FR / AD-control-paths
  Active Directory Control Paths auditing and graphing tools
  ☆673Updated 4 years ago
• danielbohannon / Revoke-Obfuscation
  PowerShell Obfuscation Detection Framework
  ☆745Updated last year
• A-mIn3 / WINspect
  Powershell-based Windows Security Auditing Toolbox
  ☆575Updated 6 years ago
• Invoke-IR / ACE
  Automated, Collection, and Enrichment Platform
  ☆325Updated 5 years ago
• l0ss / Grouper
  A PowerShell script for helping to find vulnerable settings in AD Group Policy. (deprecated, use Grouper2 instead!)
  ☆738Updated 6 years ago
• Infocyte / PSHunt
  Powershell Threat Hunting Module
  ☆286Updated 9 years ago
• mattifestation / PowerShellArsenal
  A PowerShell Module Dedicated to Reverse Engineering
  ☆885Updated 4 years ago
• cryps1s / DARKSURGEON
  DARKSURGEON is a Windows packer project to empower incident response, digital forensics, malware analysis, and network defense.
  ☆468Updated 5 years ago
• CredDefense / CredDefense
  Credential and Red Teaming Defense for Windows Environments
  ☆329Updated last year
• Cyb3rWard0g / Invoke-ATTACKAPI
  A PowerShell script to interact with the MITRE ATT&CK Framework via its own API
  ☆369Updated 6 years ago
• nsacyber / Windows-Event-Log-Messages
  Retrieves the definitions of Windows Event Log messages embedded in Windows binaries and provides them in discoverable formats. #nsacyber
  ☆405Updated 2 years ago
• TonyPhipps / Meerkat
  A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.
  ☆474Updated 11 months ago
• darkoperator / Posh-Sysmon
  PowerShell module for creating and managing Sysinternals Sysmon config files.
  ☆214Updated 4 years ago
• MHaggis / sysmon-dfir
  Sources, configuration and how to detect evil things utilizing Microsoft Sysmon.
  ☆929Updated last year
• nsacyber / Event-Forwarding-Guidance
  Configuration guidance for implementing collection of security relevant Windows Event Log events by using Windows Event Forwarding. #nsac…
  ☆879Updated 4 years ago
• mandiant / flare-wmi
  ☆428Updated 2 years ago
• cyberark / ACLight
  A script for advanced discovery of Privileged Accounts - includes Shadow Admins
  ☆817Updated 6 years ago
• utsecnet / PAW
  ☆317Updated 5 years ago
• PowerShellMafia / PowerSCCM
  PowerSCCM - PowerShell module to interact with SCCM deployments
  ☆369Updated 3 years ago
• ion-storm / sysmon-config
  Advanced Sysmon ATT&CK configuration focusing on Detecting the Most Techniques per Data source in MITRE ATT&CK, Provide Visibility into …
  ☆812Updated 2 years ago
• outflanknl / Invoke-ADLabDeployer
  Automated deployment of Windows and Active Directory test lab networks. Useful for red and blue teams.
  ☆493Updated 6 years ago
• mandiant / ShimCacheParser
  ☆278Updated 2 years ago
• davehull / Kansa
  A Powershell incident response framework
  ☆1,622Updated 2 years ago
• palantir / windows-event-forwarding
  A repository for using windows event forwarding for incident detection and response
  ☆1,288Updated 2 months ago
• nsacyber / Pass-the-Hash-Guidance
  Configuration guidance for implementing Pass-the-Hash mitigations. #nsacyber
  ☆200Updated 8 years ago