Alternatives and similar repositories for fwallower

Users that are interested in fwallower are comparing it to the libraries listed below

• Trimarc / Invoke-TrimarcADChecks
  The Invoke-TrimarcADChecks.ps1 PowerShell script is designed to gather data from a single domain AD forest based on our similar checks pe…
  ☆51Updated last year
• olafhartong / DefenderHarvester
  Expose a lot of MDE telemetry that is not easily accessible in any searchable form
  ☆106Updated 5 months ago
• JeffMichelmore / MDEKit
  ☆41Updated last year
• MHaggis / ASRGEN
  ASR Configurator, Essentials and Atomic Testing
  ☆42Updated last month
• LaresLLC / SysmonConfigPusher
  Pushes Sysmon Configs
  ☆88Updated 3 years ago
• MichaelGrafnetter / active-directory-firewall
  Active Directory Firewall
  ☆69Updated 3 weeks ago
• Harvester57 / Security-ADMX
  Custom ADMX template focused on hardening Windows 10 & Windows 11 systems
  ☆82Updated this week
• olafhartong / WDACme
  A WDAC configuration repository with the sole intention of enriching MDE
  ☆28Updated 2 years ago
• dwmetz / QuickPcap
  A quick and easy PowerShell script to collect a packet trace with option to convert .etl to .pcap.
  ☆40Updated 2 years ago
• Spicy-Toaster / ActiveDirectory-Tiering
  Scripts and a short guide for using them to tier an Active Directory. Made for BSides Copenhagen 2024
  ☆38Updated 6 months ago
• ScarredMonk / PopulateActiveDirectory
  Powershell script to build active directory forest and populate AD with random AD objects including AD users objects, computers objects, …
  ☆35Updated 3 years ago
• jakehildreth / BlueTuxedo
  A tiny tool built to find and fix common misconfigurations in Active Directory-integrated DNS
  ☆115Updated 4 months ago
• MotiBa / AppLocker
  AppLocker hardening policies
  ☆25Updated 6 years ago
• Kaidja / EntraID
  Automation around Entra ID
  ☆36Updated 6 months ago
• uniQuk / caReports
  Conditional Access Reporting
  ☆27Updated 2 months ago
• THEVER1TAS / sysmon-config
  Sysmon configuration file templates with advanced event tracing and blocking
  ☆40Updated last week
• airbus-cert / ntTraceControl
  Powershell Event Tracing Toolbox
  ☆75Updated 3 years ago
• humio / security_monitoring
  ☆41Updated 2 years ago
• jakehildreth / PowerPUG
  A tiny tool built to help AD Admins tame the Protected Users group.
  ☆91Updated 4 months ago
• reprise99 / 4688-sysmon
  ☆62Updated last year
• NetSPI / PowerHunt
  PowerHunt is a modular threat hunting framework written in PowerShell that leverages PowerShell Remoting for data collection on scale.
  ☆70Updated 5 months ago
• jakehildreth / adcs-snippets
  Just a bunch of code snippets to identify and remediate common Active Directory Certificate Services issues.
  ☆32Updated last year
• secgroundzero / KQL_Reference_Manual
  ☆42Updated 4 years ago
• zh54321 / GraphPreConsentExplorer
  A comprehensive list of usable Entra ID first-party clients with pre-consented Microsoft Graph scopes, in a simple YAML-file explorable w…
  ☆107Updated 2 months ago
• EvotecIT / PowerShellManager
  Little PowerShell module to extract PowerShell scripts that no longer exists on disk but were run and are still in Event Logs.
  ☆40Updated 4 years ago
• DefensiveOrigins / DomainBuildScripts
  Build a domain with three quick PowerShell scripts!
  ☆29Updated 5 years ago
• jischell-msft / RemoteManagementMonitoringTools
  Collection of Remote Management Monitoring tool artifacts, for assisting forensics and investigations
  ☆88Updated 10 months ago
• Devolutions / devolutions-labs
  Self-contained Hyper-V Active Directory Lab Environment
  ☆58Updated 2 weeks ago
• techspence / Locksmith
  A tool to identify and remediate common misconfigurations in Active Directory Certificate Services
  ☆16Updated last year
• biffalo / easy-wins-endpoint-defense
  Collection of scripts/resources/ideas for attack surface reduction and additional logging to enable better threat hunting on Windows endp…
  ☆38Updated last year