grayfold3d

POSH-Triage

Tools for parsing Forensic images

Get-KapeModuleBinaries

Parses KAPE module files and downloads binaries referenced by BinaryURL

PSCrowdstrike

A PowerShell wrapper around Crowdstrike API

PowerShell

A series of scripts

DeepBlueCLI

EDR-Testing-Script

Test the accuracy of Endpoint Detection and Response (EDR) software with simple script which executes various ATT&CK/LOLBAS/Invoke-CradleCrafter payloads

evtx

C# based evtx parser with lots of extras

KapeFiles

This repository serves as a place for community created Targets and Modules for use with KAPE.

Start-SysmonInstall

Automate Sysmon install using @swiftonsecurity config