Project that help restoring malware / run / deleted scripts straight from Event Logs for further analysis

This module scans links for malicious activity.

Test for applicable patches to prevent the WannaCry malware. Tests for SMB1 protocol and component.

Test for applicable patches to prevent the WannaCry/WannaCrypt malware. Tests for the SMB1 protocol and component.

Module to interact with the GreyNoise API.

This script reviews the Registry Hive and identifies any scheduled tasks without SD (security descriptor) Value within the Task Key. We recommend that you perform analysis on these tasks as needed. The absence of SecurityDescriptor is a Defense Evasion and Persistence technique as these tasks will remain hidden from regular tasks queries results ex... More info

A comprehensive PowerShell toolkit for threat hunting, digital forensics, and incident response (DFIR). Provides "Hunt" functions to detect persistence mechanisms, analyze system artifacts, search event logs, and generate detailed forensic reports.