🚀AutoRuns is a PowerShell module that will help do live incident response and enumerate autoruns artifacts that may be used by legitimate programs as well as malware to achieve persistence.
☆303Jul 19, 2026Updated last month
Alternatives and similar repositories for AutoRuns
Users that are interested in AutoRuns are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Gives context to a system. Uses EQGRP shadow broker leaked list to give some descriptions to processes.☆48Jun 5, 2017Updated 9 years ago
- Python script for analyis of the "Trust.csv" file generated by Veil PowerView. Provides graph based analysis and output.☆120Aug 18, 2020Updated 6 years ago
- PowerForensics provides an all in one platform for live disk forensic analysis☆1,443Nov 16, 2023Updated 2 years ago
- Generates anti-sandbox analysis HTA files without payloads☆123Mar 16, 2017Updated 9 years ago
- PowerShell Empire module for logging USB keystrokes via ETW☆32Nov 11, 2016Updated 9 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- PowerKrabsEtw is a PowerShell interface for doing real-time ETW tracing.☆102Nov 17, 2020Updated 5 years ago
- POC Highlighting Obfuscation Techniques used by FIN threat actors based on cmd.exe's replace functionality and cmd.exe/powershell.exe's s…☆108Jul 2, 2017Updated 9 years ago
- A JavaScript and VBScript Based Empire Launcher, which runs within their own embedded PowerShell Host.☆321Jun 5, 2017Updated 9 years ago
- This repo is for WMIOps, a powershell script which uses WMI for various purposes across a network.☆386Jun 25, 2024Updated 2 years ago
- Powershell module to assist in attacking Exchange/Outlook Web Access☆181Sep 22, 2016Updated 9 years ago
- Custom scripts released for BSidesDC 2016☆14Oct 19, 2016Updated 9 years ago
- Fileless SQL Server CLR-based Custom Stored Procedure Command Execution☆34Mar 6, 2017Updated 9 years ago
- CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across al…☆656Aug 19, 2019Updated 7 years ago
- A script for advanced discovery of Privileged Accounts - includes Shadow Admins☆830Sep 9, 2019Updated 6 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- ☆66Dec 19, 2018Updated 7 years ago
- Currently not updated for WMIEvent module...☆262Feb 23, 2016Updated 10 years ago
- Powershell Threat Hunting Module☆293Sep 21, 2016Updated 9 years ago
- Easily define in-memory enums, structs, and Win32 functions in PowerShell☆228Oct 14, 2018Updated 7 years ago
- PoC: process watcher patterns to make killing a process hard.☆11Aug 1, 2018Updated 8 years ago
- Windows PowerShell domain scanning tool☆54Apr 23, 2016Updated 10 years ago
- Port of eternal blue exploits to powershell☆151Jun 3, 2017Updated 9 years ago
- Exploit the credentials present in files and memory☆845May 25, 2023Updated 3 years ago
- Automated, Collection, and Enrichment Platform☆325Nov 14, 2019Updated 6 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Collection of PowerShell scripts☆451Dec 18, 2017Updated 8 years ago
- Random Tools☆852Oct 20, 2022Updated 3 years ago
- Module to provide PowerShell functions that abstract Win32 API functions☆253Jun 6, 2024Updated 2 years ago
- ☆265Oct 25, 2025Updated 10 months ago
- A .NET tool that uses AppDomain's to enable dynamic execution and escape detection.☆29Nov 25, 2019Updated 6 years ago
- PowerShell module to play with Kerberos S4U extensions☆53Apr 2, 2017Updated 9 years ago
- PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted da…☆494Jul 29, 2017Updated 9 years ago
- In case you didn't now how to restore the user password after a password reset (get the previous hash with DCSync)☆172Jun 8, 2017Updated 9 years ago
- Executes common PowerSploit Powerview functions then combines output into a spreadsheet for easy analysis.☆71Jul 26, 2018Updated 8 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- ☆79Sep 27, 2015Updated 10 years ago
- A PowerShell based utility for the creation of malicious Office macro documents.☆1,108Nov 3, 2017Updated 8 years ago
- NetSPI PowerShell Scripts☆344Feb 10, 2026Updated 6 months ago
- Invoke-LiveResponse☆150Feb 22, 2022Updated 4 years ago
- LyncSniper: A tool for penetration testing Skype for Business and Lync deployments☆307Jul 3, 2020Updated 6 years ago
- Crowdstrike Falcon Host script for iterating through instances to get alert and other relevant data☆14Jul 16, 2019Updated 7 years ago
- Powershell VNC injector☆347Jun 29, 2020Updated 6 years ago