securethelogs / Powershell

Related projects: ⓘ

• eshlomo1 / Azure-AD-Incident-Response
  Azure AD Incident Response
  ☆24Updated 2 years ago
• Securityinbits / cheatsheet
  These are some of the commands which I use frequently during Malware Analysis and DFIR.
  ☆25Updated 8 months ago
• HarmJ0y / Invoke-ADDefense
  Defensive-oriented Active Directory enumeration
  ☆23Updated 8 years ago
• DefensiveOrigins / DomainBuildScripts
  Build a domain with three quick PowerShell scripts!
  ☆28Updated 4 years ago
• cottinghamd / PowershellAdmin
  Some Powershell scripts developed during my security consulting work. Hopefully they are useful to you too!
  ☆13Updated 4 years ago
• ajackal / ir_scripts
  incident response scripts
  ☆18Updated 5 years ago
• guardsight / gsvsoc_mission-model
  Incident Response Report Using GitHub-Sphinx
  ☆19Updated 4 years ago
• HASecuritySolutions / Update-VMs
  Snapshot, patch, health-check, and potentially roll-back Windows VMs
  ☆31Updated 6 years ago
• WiredPulse / AutomatedProfiler
  Automated forensics written in PowerShell
  ☆32Updated 4 years ago
• swisscom / PowerSponse
  PowerSponse is a PowerShell module focused on targeted containment and remediation during incident response.
  ☆38Updated 2 years ago
• e-sterling / Nmap-Scan.PS1
  PowerShell wrapper for nmap, allows easy scanning of many hosts and subnets
  ☆17Updated 6 years ago
• Cyb3rWard0g / azure-loganalytics-api-clients
  A few scripts I put together to send and receive data from an Azure Log Analytics workspace leveraging the Azure Monitor HTTP Data Collec…
  ☆23Updated last year
• polylogyx / PolyMon
  ☆15Updated this week
• drewhjelm / firewall-audit
  ☆16Updated 4 years ago
• Starke427 / Windows-Security-Policy
  Specific guidance and configuration scripts based on Microsoft-recommended security configuration baselines for Windows.
  ☆9Updated 4 years ago
• olafhartong / PSSysmonTools
  Sysmon Tools for PowerShell
  ☆12Updated 6 years ago
• Mostafayahia-hunter / Virustotal-python-API-Domains-IPs-and-URLs-
  ☆21Updated 3 years ago
• PwC-IR / MIA-MailItemsAccessed-
  Tool to extract Sessions, MessageID(s) and find the emails belonging to MessageID(s). This script utilizes the MailItemsAccessed features…
  ☆37Updated 3 years ago
• olafhartong / Sentinel-template-parser
  Azure Sentinel Template parser
  ☆15Updated 3 years ago
• TonyPhipps / Powershell
  Tony's collection of powershell scripts, typically geared toward cybersec
  ☆32Updated 3 weeks ago
• HASecuritySolutions / WECComputerGroupMgmt
  ☆11Updated 3 years ago
• ScarredMonk / PopulateActiveDirectory
  Powershell script to build active directory forest and populate AD with random AD objects including AD users objects, computers objects, …
  ☆28Updated 2 years ago
• n3l5 / irMempull
  PowerShell Memory Pulling script
  ☆19Updated 9 years ago
• gmellini / Microsoft-Defender-Security-Center-Hunting-Queries
  Hunting Queries for Microsoft Defender Security Center https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defe…
  ☆35Updated 3 years ago
• mgreen27 / EventLogs
  ☆18Updated this week
• jangeisbauer / gundog
  gundog - guided hunting in Microsoft Defender
  ☆52Updated 3 years ago
• olafhartong / sysmon-parser
  Automatically generated Sysmon parser for Azure Sentinel
  ☆14Updated this week
• piesecurity / WindowsEventsToCSVTimeline
  Simple Powershell scripts to collect all Windows Event Logs from a host and parse them into one CSV timeline.
  ☆33Updated 5 years ago
• EnclaveConsulting / SANS-Misc
  ☆26Updated this week
• jokezone / Update-Sysmon
  This repository was created to aid in the deployment/maintenance of the Sysmon service on a large number of computers.
  ☆82Updated last year