Alternatives and similar repositories for PSSysmonTools:

Users that are interested in PSSysmonTools are comparing it to the libraries listed below

• gpoguy / GetVulnerableGPO
  PowerShell script to find 'vulnerable' security-related GPOs that should be hardended
  ☆198Updated 6 years ago
• PSGumshoe / PSGumshoe
  ☆257Updated 5 months ago
• SadProcessor / SomeStuff
  Some PowerShell Stuff
  ☆281Updated 2 years ago
• realparisi / WMI_Monitor
  Log newly created WMI consumers and processes to the Windows Application event log
  ☆124Updated 7 years ago
• beahunt3r / Windows-Hunting
  ☆350Updated 4 years ago
• Infocyte / PSHunt
  Powershell Threat Hunting Module
  ☆283Updated 8 years ago
• darkoperator / Posh-Sysmon
  PowerShell module for creating and managing Sysinternals Sysmon config files.
  ☆207Updated 4 years ago
• Invoke-IR / Uproot
  Currently not updated for WMIEvent module...
  ☆263Updated 9 years ago
• MHaggis / hunt-detect-prevent
  Lists of sources and utilities utilized to hunt, detect and prevent evildoers.
  ☆165Updated 6 years ago
• Invoke-IR / ACE
  Automated, Collection, and Enrichment Platform
  ☆325Updated 5 years ago
• jaredcatkinson / PSReflect-Functions
  Module to provide PowerShell functions that abstract Win32 API functions
  ☆246Updated 11 months ago
• netwrix / poshkatz
  PowerShell module for Mimikatz
  ☆212Updated 5 years ago
• mattifestation / WDACPolicies
  A collection of Windows software baseline notes with corresponding Windows Defender Application Control (WDAC) policies
  ☆62Updated last year
• JoeyRentenaar / Office-365-Extractor
  The Office 365 Extractor is a tool that allows for complete and reliable extraction of the Unified Audit Log (UAL)
  ☆159Updated 2 years ago
• giMini / NOAH
  PowerShell No Agent Hunting
  ☆110Updated 7 years ago
• matthewdunwoody / block-parser
  Parser for Windows PowerShell script block logs
  ☆95Updated 9 months ago
• OneLogicalMyth / Automated-AD-Setup
  A PowerShell script that aims to have a fully configured domain built in under 10 minutes, but also apply security configuration and hard…
  ☆198Updated 4 years ago
• mattifestation / DeviceGuardBypassMitigationRules
  A reference Device Guard code integrity policy consisting of FilePublisher deny rules for published Device Guard configuration bypasses
  ☆115Updated 7 years ago
• MotiBa / Sysmon
  Sysmon configuration
  ☆65Updated 6 years ago
• leeberg / BlueHive
  PowerShell based Active Directory Honey User Account Management with Universal Dashboards
  ☆142Updated 5 years ago
• mattifestation / PSReflect
  Easily define in-memory enums, structs, and Win32 functions in PowerShell
  ☆222Updated 6 years ago
• mkorman90 / sysmon-config-bypass-finder
  Detect possible sysmon logging bypasses given a specific configuration
  ☆108Updated 6 years ago
• vletoux / SmbScanner
  Smb Scanner from PingCastle
  ☆124Updated 6 years ago
• mgreen27 / Invoke-LiveResponse
  Invoke-LiveResponse
  ☆147Updated 3 years ago
• JavelinNetworks / IR-Tools
  IR-Tools - PowerShell tools for IR
  ☆130Updated 7 years ago
• Ben0xA / PowerShellDefense
  Some PowerShell Defensive Scripts
  ☆127Updated 8 years ago
• OTRF / Set-AuditRule
  Useful access control entries (ACE) on system access control list (SACL) of securable objects to find potential adversarial activity
  ☆90Updated 3 years ago
• littl3field / Audix
  Audix is a PowerShell tool to quickly configure the Windows Event Audit Policies for security monitoring
  ☆117Updated 5 years ago
• jsecurity101 / Windows-API-To-Sysmon-Events
  A repository that maps API calls to Sysmon Event ID's.
  ☆119Updated 2 years ago
• Cyb3rWard0g / Invoke-ATTACKAPI
  A PowerShell script to interact with the MITRE ATT&CK Framework via its own API
  ☆368Updated 6 years ago