Ranked by Attention Score: stars gained over the last 180 complete days
42 repositories by Attention Score · May 7, 2026 – Nov 2, 2026 (UTC)
A simple, lightweight PowerShell script that allows you to remove pre-installed apps, disable telemetry, as well as perform various other changes to declutter and customize your Windows experience. Win11Debloat works for both Windows 10 and Windows 11.
Chris Titus Tech's Windows Utility - Install Programs, Tweaks, Fixes, and Updates
SpotX patcher used for patching the desktop version of Spotify
Force Remove Copilot, Recall and More in Windows 11
Office Tool Plus localization projects.
A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.
Azure Data SQL Samples - Official Microsoft GitHub Repository containing code samples for SQL Server, Azure SQL, Azure Synapse, and Azure SQL Edge
Lovely console emulator package for Windows
A curated list of amazingly awesome LÖVE libraries, resources and shiny things.
PowerSploit - A PowerShell Post-Exploitation Framework
Script to remove Windows 10 bloatware.
A PowerShell environment for Git
Pester is the ubiquitous test and mock framework for PowerShell.
🚀 SQL Server automation and instance migrations have never been safer, faster or freer
🛠 A command-line system information utility written in PowerShell. Like Neofetch, but for Windows.
Empire is a PowerShell and Python post-exploitation agent.
No description provided by the repository host.
Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte
Pode is a Cross-Platform PowerShell web framework for creating REST APIs, Web Sites, and TCP/SMTP servers
Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.
WELA (Windows Event Log Analyzer, ゑ羅) is a tool for auditing and configuring Windows event log settings. Windows event logs are a vital source of information for Digital Forensics and Incident Response (DFIR), providing visibility into system activity and security events.
Samples for ML.NET, an open source and cross-platform machine learning framework for .NET.
🚀AutoRuns is a PowerShell module that will help do live incident response and enumerate autoruns artifacts that may be used by legitimate programs as well as malware to achieve persistence.
No description provided by the repository host.
Work with Windows containers and LCOW on Mac/Linux/Windows
No description provided by the repository host.
$MFT directory tree reconstruction & FILE record info
:rocket: PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted data, hashes PowerShell and various system properties, and sends the data off to the security team. The data can be pushed to a share, sent over email, or retained locally.
Sample PowerApps solutions designed to be used in SharePoint context
Zero Infrastructure Password Cracking
Powershell-based bot framework
A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.
CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.
Build docker images for Sitecore