mattifestation / PSSysmonToolsLinks
Sysmon Tools for PowerShell
☆231Updated 7 years ago
Alternatives and similar repositories for PSSysmonTools
Users that are interested in PSSysmonTools are comparing it to the libraries listed below
Sorting:
- ☆263Updated last month
- Some PowerShell Stuff☆281Updated 3 years ago
- PowerShell module for creating and managing Sysinternals Sysmon config files.☆214Updated 4 years ago
- Log newly created WMI consumers and processes to the Windows Application event log☆125Updated 7 years ago
- PowerShell script to find 'vulnerable' security-related GPOs that should be hardended☆200Updated 7 years ago
- Sysmon configuration☆65Updated 7 years ago
- Lists of sources and utilities utilized to hunt, detect and prevent evildoers.☆166Updated 7 years ago
- ☆348Updated 4 years ago
- Module to provide PowerShell functions that abstract Win32 API functions☆249Updated last year
- The Office 365 Extractor is a tool that allows for complete and reliable extraction of the Unified Audit Log (UAL)☆160Updated 2 years ago
- Parser for Windows PowerShell script block logs☆100Updated last year
- Currently not updated for WMIEvent module...☆263Updated 9 years ago
- A PowerShell script that aims to have a fully configured domain built in under 10 minutes, but also apply security configuration and hard…☆201Updated 4 years ago
- PowerShell No Agent Hunting☆110Updated 7 years ago
- Automated, Collection, and Enrichment Platform☆324Updated 6 years ago
- PowerKrabsEtw is a PowerShell interface for doing real-time ETW tracing.☆103Updated 5 years ago
- Powershell Threat Hunting Module☆287Updated 9 years ago
- Theat hunting notes in flat file format and mapped to MITRE's ATT&CK IDs☆43Updated 7 years ago
- PowerShell Module to interact with VirusTotal☆122Updated 5 years ago
- Detect possible sysmon logging bypasses given a specific configuration☆110Updated 6 years ago
- Easily define in-memory enums, structs, and Win32 functions in PowerShell☆227Updated 7 years ago
- Invoke-LiveResponse☆149Updated 3 years ago
- A collection of Windows software baseline notes with corresponding Windows Defender Application Control (WDAC) policies☆63Updated 2 years ago
- Splunk Technology Add-On (TA) for collecting ETW events from Windows systems☆17Updated 3 years ago
- PowerShell script which allows pausing\unpausing Win32/64 exes☆142Updated 6 years ago
- Audix is a PowerShell tool to quickly configure the Windows Event Audit Policies for security monitoring☆116Updated 2 months ago
- Scripts for comparing Microsoft Windows compliance with the ASD 1709 & Office 2016 Hardening Guides☆160Updated 6 years ago
- IR-Tools - PowerShell tools for IR☆130Updated 8 years ago
- PowerShell - Rapid Response... For the incident responder in you!☆303Updated 6 years ago
- A reference Device Guard code integrity policy consisting of FilePublisher deny rules for published Device Guard configuration bypasses☆114Updated 8 years ago