PowerGRR is an API client library in PowerShell working on Windows, Linux and macOS for GRR automation and scripting.
☆57Mar 18, 2022Updated 4 years ago
Alternatives and similar repositories for PowerGRR
Users that are interested in PowerGRR are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- PowerSponse is a PowerShell module focused on targeted containment and remediation during incident response.☆40Mar 18, 2022Updated 4 years ago
- Threat hunting repo for my independent study on threat hunting with OSQuery☆27Jan 16, 2018Updated 8 years ago
- Check Sigma rules for easy-to-bypass whitelists to make them more robust (https://github.com/SigmaHQ/sigma)☆16Feb 1, 2021Updated 5 years ago
- Network detector for Winnti malware☆21Mar 6, 2018Updated 8 years ago
- This package allows the use of a custom Elastalert Alert which creates alerts with observables in TheHive using TheHive4Py.☆26May 18, 2021Updated 5 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Oriana is a threat hunting tool that leverages a subset of Windows events to build relationships, calculate totals and run analytics. The…☆174Jun 10, 2021Updated 5 years ago
- PowerKrabsEtw is a PowerShell interface for doing real-time ETW tracing.☆102Nov 17, 2020Updated 5 years ago
- Some IR notes☆72Jul 23, 2016Updated 10 years ago
- A multi-platform .Net wrapper library for the native Yara library.☆39Jun 30, 2023Updated 3 years ago
- This repository is a curated list of pro bono incident response entities.☆21Jun 21, 2023Updated 3 years ago
- A YARA Rule Performance Measurement Tool☆64Feb 26, 2024Updated 2 years ago
- Collection of malware persistence and hunting information. Be a persistent persistence hunter!☆188Mar 31, 2026Updated 7 months ago
- OTABase is an over-the-air testing framework for detecting memory crashes in commercial LTE basebands.☆11Sep 14, 2025Updated last year
- The Office 365 Extractor is a tool that allows for complete and reliable extraction of the Unified Audit Log (UAL)☆159Mar 27, 2023Updated 3 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- "Evolving AppCompat/AmCache data analysis beyond grep"☆216Sep 15, 2021Updated 5 years ago
- my MSTICpy practice and custom tools repository☆11Apr 23, 2025Updated last year
- Auxiliary scripts for Incident Response with ELK☆11Oct 7, 2015Updated 11 years ago
- Parses KAPE module files and downloads binaries referenced by BinaryURL☆18Oct 2, 2019Updated 7 years ago
- Binaries for the log2timeline projects and dependencies☆39Updated this week
- Volatility plugin to extract X screenshots from a memory dump☆37May 15, 2018Updated 8 years ago
- PowerShell No Agent Hunting☆111Apr 23, 2018Updated 8 years ago
- A PowerShell script to interact with the MITRE ATT&CK Framework via its own API☆367Feb 7, 2019Updated 7 years ago
- SQL scripts for querying event logs☆23Jul 12, 2017Updated 9 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Scripts to facilitate filtering with Plaso☆126May 20, 2020Updated 6 years ago
- Query and report user logons relations from MS Windows Security Events☆242Aug 9, 2018Updated 8 years ago
- Code for the DIMVA 2018 paper: "MemScrimper: Time- and Space-Efficient Storage of Malware Sandbox Memory Dumps"☆26Jul 22, 2019Updated 7 years ago
- LNK to JSON☆14Mar 7, 2019Updated 7 years ago
- IR-Tools - PowerShell tools for IR☆130Jul 10, 2017Updated 9 years ago
- Fast incident overview☆41Feb 11, 2017Updated 9 years ago
- A PowerShell module to assist in parsing and managing catalog files.☆22Jan 12, 2017Updated 9 years ago
- Dettectinator - The Python library to your DeTT&CT YAML files.☆118Jan 22, 2026Updated 9 months ago
- A GC link parser for both linkfiles and jumplists.☆18Oct 28, 2016Updated 10 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted driv…☆347Jun 25, 2022Updated 4 years ago
- CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across al…☆657Aug 19, 2019Updated 7 years ago
- Digital Forensics artifact repository☆1,283Updated this week
- Sysmon Tools for PowerShell☆233Aug 17, 2018Updated 8 years ago
- A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.☆483Nov 15, 2024Updated last year
- Tools for the Computer Incident Response Team☆153Apr 17, 2017Updated 9 years ago
- An Incident Response tool that visualizes historic process execution evidence (based on Event ID 4688 - Process Creation Event) in a tree…☆60Jan 30, 2018Updated 8 years ago