Alternatives and similar repositories for CimSweep

Users that are interested in CimSweep are comparing it to the libraries listed below

• Invoke-IR / Uproot
  Currently not updated for WMIEvent module...
  ☆262Updated 9 years ago
• gfoss / PSRecon
  PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted da…
  ☆486Updated 7 years ago
• darkoperator / Posh-SecMod
  PowerShell Module with Security cmdlets for security work
  ☆444Updated 5 years ago
• A-mIn3 / WINspect
  Powershell-based Windows Security Auditing Toolbox
  ☆576Updated 6 years ago
• WiredPulse / PoSh-R2
  PowerShell - Rapid Response... For the incident responder in you!
  ☆299Updated 5 years ago
• Invoke-IR / PowerForensics
  PowerForensics provides an all in one platform for live disk forensic analysis
  ☆1,401Updated last year
• PowerShellMafia / PowerSCCM
  PowerSCCM - PowerShell module to interact with SCCM deployments
  ☆360Updated 3 years ago
• cyberark / ACLight
  A script for advanced discovery of Privileged Accounts - includes Shadow Admins
  ☆801Updated 5 years ago
• l0ss / Grouper
  A PowerShell script for helping to find vulnerable settings in AD Group Policy. (deprecated, use Grouper2 instead!)
  ☆739Updated 6 years ago
• Invoke-IR / ACE
  Automated, Collection, and Enrichment Platform
  ☆325Updated 5 years ago
• GoFetchAD / GoFetch
  GoFetch is a tool to automatically exercise an attack plan generated by the BloodHound application.
  ☆634Updated 7 years ago
• mattifestation / PowerShellArsenal
  A PowerShell Module Dedicated to Reverse Engineering
  ☆873Updated 3 years ago
• danielbohannon / Revoke-Obfuscation
  PowerShell Obfuscation Detection Framework
  ☆735Updated last year
• ion-storm / sysmon-config
  Advanced Sysmon ATT&CK configuration focusing on Detecting the Most Techniques per Data source in MITRE ATT&CK, Provide Visibility into …
  ☆803Updated last year
• RedSiege / WMImplant
  This is a PowerShell based tool that is designed to act like a RAT. Its interface is that of a shell where any command that is supported …
  ☆815Updated 11 months ago
• ANSSI-FR / AD-control-paths
  Active Directory Control Paths auditing and graphing tools
  ☆663Updated 4 years ago
• Cyb3rWard0g / Invoke-ATTACKAPI
  A PowerShell script to interact with the MITRE ATT&CK Framework via its own API
  ☆369Updated 6 years ago
• RedSiege / WMIOps
  This repo is for WMIOps, a powershell script which uses WMI for various purposes across a network.
  ☆384Updated 11 months ago
• Infocyte / PSHunt
  Powershell Threat Hunting Module
  ☆283Updated 8 years ago
• outflanknl / Invoke-ADLabDeployer
  Automated deployment of Windows and Active Directory test lab networks. Useful for red and blue teams.
  ☆487Updated 6 years ago
• mandiant / flare-wmi
  ☆428Updated 2 years ago
• davehull / Kansa
  A Powershell incident response framework
  ☆1,603Updated 2 years ago
• MHaggis / sysmon-dfir
  Sources, configuration and how to detect evil things utilizing Microsoft Sysmon.
  ☆917Updated last year
• CredDefense / CredDefense
  Credential and Red Teaming Defense for Windows Environments
  ☆330Updated 10 months ago
• nsacyber / Event-Forwarding-Guidance
  Configuration guidance for implementing collection of security relevant Windows Event Log events by using Windows Event Forwarding. #nsac…
  ☆866Updated 4 years ago
• utsecnet / PAW
  ☆314Updated 5 years ago
• mandiant / ShimCacheParser
  ☆276Updated 2 years ago
• darkoperator / Posh-Sysmon
  PowerShell module for creating and managing Sysinternals Sysmon config files.
  ☆208Updated 4 years ago
• PyroTek3 / PowerShell-AD-Recon
  PowerShell Scripts I find useful
  ☆751Updated 9 years ago
• cryps1s / DARKSURGEON
  DARKSURGEON is a Windows packer project to empower incident response, digital forensics, malware analysis, and network defense.
  ☆468Updated 4 years ago