Popular repositories

1. HistoricProcessTree HistoricProcessTree Public

   An Incident Response tool that visualizes historic process execution evidence (based on Event ID 4688 - Process Creation Event) in a tree view.

   Python 59 7

2. WebTrap WebTrap Public

   This project is designed to create deceptive webpages to deceive and redirect attackers away from real websites.

   Python 56 15

3. GetConsoleHistoryAndOutput GetConsoleHistoryAndOutput Public

   An Incident Response tool to extract console command history and screen output buffer

   C++ 42 5

4. Get-NetworkConnection Get-NetworkConnection Public

   Edited version of Lee Christensen's Get-NetworkConnection which includes timestamp for each network connection

   PowerShell 34 3

5. Update-AllUsersQA Update-AllUsersQA Public

   Update-AllUsersQA is a PowerShell script used to change or disable the security questions and answers for local users in a Windows 10 machine.

   PowerShell 24 9

6. MailSniper MailSniper Public

   Forked from dafthack/MailSniper

   MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It ca…

   PowerShell 8