Create an incident response triage toolkit for use with Windows or Linux.
Public repository record indexed from GitHub. Explore verified star velocity metrics, source code repositories, and curated developer tool directories across the GitHubRepo ecosystem.
PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted data, hashes PowerShell and various system properties, and sends the data off to the security team. The data can be pushed to a share, sent over email, or retained locally.
PowerTools is a collection of PowerShell projects with a focus on offensive operations.
Empire is a pure PowerShell post-exploitation agent.
A PoC WMI backdoor presented at Black Hat 2015