Meerkat
A PowerShell module collection for agentless artifact gathering and reconnaissance on Windows endpoints.
What is Meerkat?
Meerkat is a PowerShell-based toolset for collecting forensic artifacts and performing reconnaissance on Windows endpoints without requiring a pre-installed agent. It gathers system data like processes, services, event logs, and network configurations to support incident response, threat hunting, and baseline monitoring. The tool is designed to be lightweight and agentless, using WinRM for remote execution.
Security analysts, incident responders, and threat hunters who need to collect forensic data from Windows systems during investigations or proactive security assessments.
Meerkat stands out for its agentless approach, pure PowerShell implementation for transparency, and comprehensive artifact coverage, making it a versatile and low-impact tool for Windows endpoint forensics.
Overview
A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.
Use Cases
Best For
- Performing rapid triage during a security incident on Windows systems
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
