apexxor

apexxor's Stars

• ChrisTitusTech/winutil

  Chris Titus Tech's Windows Utility - Install Programs, Tweaks, Fixes, and Updates

  Language:PowerShell22k2091.5k1.3k

• peass-ng/PEASS-ng

  PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

  Language:C#15.9k2191843.1k

• Raphire/Win11Debloat

  A simple, easy to use PowerShell script to remove pre-installed apps from Windows, disable telemetry, remove Bing from Windows search as well as perform various other changes to declutter and improve your Windows experience. This script works for both Windows 10 and Windows 11.

  Language:PowerShell12.9k85105545

• Sophia-Community/SophiApp

  :zap: The most powerful open source tweaker on GitHub for fine-tuning Windows 10 & Windows 11

  Language:C#4.2k4448177

• TracecatHQ/tracecat

  The open source Tines / Splunk SOAR alternative.

  Language:TypeScript2.4k2187164

• api0cradle/UltimateAppLockerByPassList

  The goal of this repository is to document the most common techniques to bypass AppLocker.

  Language:PowerShell1.9k1188350

• PSAppDeployToolkit/PSAppDeployToolkit

  Project Homepage & Forums

  Language:PowerShell1.8k179736479

• tsale/EDR-Telemetry

  This project aims to compare and evaluate the telemetry of various EDR products.

  Language:Python1.5k5429147

• pentestmonkey/windows-privesc-check

  Standalone Executable to Check for Simple Privilege Escalation Vectors on Windows Systems

  Language:Python1.5k6214322

• ohmybahgosh/RockYou2021.txt

  RockYou2021.txt is a MASSIVE WORDLIST compiled of various other wordlists. RockYou2021.txt DOES NOT CONTAIN USER:PASS logins!

  889286122

• SwiftOnSecurity/OrgKit

  Provision a brand-new company with proper defaults in Windows, Offic365, and Azure

  Language:PowerShell59799252

• lithnet/ad-password-protection

  Active Directory password filter featuring breached password checking and custom complexity rules

  Language:C#4902012352

• mvelazc0/BadZure

  BadZure orchestrates the setup of Azure AD tenants, populating them with diverse entities while also introducing common security misconfigurations to create vulnerable tenants with multiple attack paths.

  Language:Python41713325

• vanvfields/Microsoft-365

  Scripts to help configure Microsoft 365

  Language:PowerShell3666210158

• jsecurity101/MSRPC-to-ATTACK

  A repository that maps commonly used attacks using MSRPC protocols to ATT&CK

  30510040

• mtniehaus/AutopilotBranding

  Language:PowerShell30143677

• Psmths/windows-forensic-artifacts

  Handbook of windows forensic artifacts across multiple Windows version with interpretation tips and some examples. Work in progress!

  25410228

• Azure/securedworkstation

  Intune managed Secured workstation

  Language:PowerShell229242152

• AzureAD/MSIdentityTools

  Repository for the Microsoft Identity Tools PowerShell module which provides various tools for performing enhanced Identity administration activities.

  Language:PowerShell224173439

• KQLMSPress/definitive-guide-kql

  Sample queries and data as part of the Microsoft Press book, The Definitive Guide to KQL

  1907022

• SpecterOps/TierZeroTable

  Table of AD and Azure assets and whether they belong to Tier Zero

  Language:HTML1856219

• pdqcom/PowerShell-Scanners

  A community repository of PowerShell Scanners for PDQ Inventory.

  Language:PowerShell179293374

• lawndoc/Respotter

  Respotter is a Responder honeypot! Catch attackers as soon as they spin up Responder in your environment.

  Language:Python16623010

• 0xAnalyst/CB-Threat-Hunting

  Language:Python11410039

• LuccaSA/PingCastle-Notify

  Monitor your PingCastle scans to highlight the rule diff between two scans

  Language:PowerShell1048418

• alexverboon/Hunting-Queries-Detection-Rules

  KQL Queries. Microsoft Defender, Microsoft Sentinel

  1022011

• mon-csirt/active-directory-security

  The "Monash Enterprise Access Model" (MEAM) is a model for tiering Active Directory that builds heavily on the Microsoft Enterprise Access Model.

  82405

• workoho/Entra-Tiering-Security-Model

  Implement a powerful Tiering Security Model in Microsoft Entra for your Cloud Administrator identities using Azure Automation.

  Language:PowerShell41233

• jsecurity101/MSFT_DriverBlockList

  Repository of Microsoft Driver Block Lists based off of OS-builds

  38306

• Trimarc/Find-and-Fix

  Small scripts and targeted tools created by Trimarc staff to help solve common issues in Identity Security.

  Language:PowerShell3100