Repository Index

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

• powershell
• nishang
• security
• red-team

game of active directory

• active-directory
• infrastructure-as-code
• pentest
• ansible

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]

• penetration-testing
• red-teaming
• windows
• fireeye-flare

The repository host gives no description.

Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte

• incident-response
• malware-detection
• persistence
• powershell

A Powershell incident response framework

CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.

A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.

• threat
• hunt
• red
• blue

$MFT directory tree reconstruction & FILE record info

• mft-browser
• mft
• powershell
• winform

🚀AutoRuns is a PowerShell module that will help do live incident response and enumerate autoruns artifacts that may be used by legitimate programs as well as malware to achieve persistence.

:mailbox: The Phishing Intelligence Engine - An Active Defense PowerShell Framework for Phishing Defense with Office 365

Invoke-LiveResponse

• ir
• dfir
• winrm
• liveresponse

PowerSponse is a PowerShell module focused on targeted containment and remediation during incident response.

• powershell
• powershell-modules
• incident-response
• containment