PowerShell

Kansadavehull/Kansa

A modular PowerShell framework for enterprise incident response and breach hunting using remote data collection.

Psakepsake/psake

A PowerShell-based build automation tool that leverages existing command-line knowledge with a syntax inspired by rake.

Windows Secure Host Baselinensacyber/Windows-Secure-Host-Baseline

Automated configuration guidance for implementing the U.S. Department of Defense's Secure Host Baseline settings on Windows 10 and Windows Server 2016.

PowerForensicsInvoke-IR/PowerForensics

A PowerShell framework for live disk forensic analysis, supporting NTFS and FAT file systems.

Statistically Likely Usernamesinsidetrust/statistically-likely-usernames

Wordlists for statistically likely usernames, optimized for horizontal password attacks and security testing.

AutorunsToWinEventLog.ps1palantir/windows-event-forwarding

A collection of Windows Event Forwarding configurations and subscriptions for centralized security event collection and incident detection.

WSLabmicrosoft/WSLab

Rapid deployment scripts for creating consistent Hyper-V lab environments for Azure Local, Windows 10, and Windows Server.

PSFzfkelleyma49/PSFzf

A PowerShell module that wraps the fuzzy finder fzf for enhanced command-line navigation and selection.

PSWriteHTMLEvotecIT/PSWriteHTML

A PowerShell module for generating HTML reports, dashboards, emails, and diagrams without requiring HTML, CSS, or JavaScript knowledge.

PSScriptToolsjdhitsolutions/PSScriptTools

A PowerShell module providing cross-platform functions to enhance scripting, console productivity, and system administration tasks.

GraphicalToolsPowerShell/GraphicalTools

PowerShell modules providing console-based GUI experiences with interactive grid and tree views for data exploration.

PowerShellArsenalmattifestation/PowerShellArsenal

A PowerShell module for reverse engineering that disassembles code, analyzes malware, parses memory structures, and inspects Windows internals.

platyPSPowerShell/platyPS

A PowerShell module for authoring external help files in Markdown and converting them to MAML format.

PSCXPscx/Pscx

A comprehensive PowerShell module providing community-driven extensions including cmdlets for file management, system administration, and Active Directory.

Antivmdetectnsmfoo/antivmdetection

A script that generates VirtualBox templates to harden Windows VMs against malware detection.

ebowlaGenetic-Malware/Ebowla

Framework for creating environmental keyed payloads that only execute on specific target systems.

PlasterPowerShell/Plaster

A template-based file and project generator for PowerShell that streamlines module, test, and configuration creation.

Invoke-Buildnightroman/Invoke-Build

A build and test automation tool that invokes tasks defined in PowerShell scripts, similar to psake but more powerful.

Active Directory Control PathsANSSI-FR/AD-control-paths

A tool for auditing and visualizing control paths in Active Directory to identify privilege escalation and resource access risks.

PESecurityNetSPI/PESecurity

PowerShell module to check Windows binaries for security features like ASLR, DEP, SafeSEH, and Authenticode.

CimSweepPowerShellMafia/CimSweep

A PowerShell suite for remote Windows incident response and hunting using CIM/WMI, requiring no agent deployment.

Zlocationvors/ZLocation

A PowerShell module that tracks frequently used directories and enables fast navigation using fuzzy matching and tab completion.

PowerlineJaykul/PowerLine

A customizable PowerShell prompt framework that enables beautiful, modular prompts with easy module integration.

Powershellerynullbind/Powershellery

A collection of PowerShell scripts for security testing, penetration testing, and general system administration tasks.

PoshRSJobproxb/PoshRSJob

A high-performance PowerShell module for running background jobs with less overhead than PSJobs.

PoshBotposhbotio/PoshBot

A PowerShell-based bot framework for executing PowerShell commands as chat commands, enabling ChatOps workflows.

PolarisPowerShell/Polaris

A cross-platform, minimalist web framework for PowerShell that enables building web servers and APIs using PowerShell scripting.

powershell-yamlcloudbase/powershell-yaml

A PowerShell module for serializing and deserializing PowerShell objects to and from YAML format.

PSRecongfoss/PSRecon

A PowerShell script for live forensic data acquisition and endpoint lockdown during Windows incident response.

PSRecongfoss/PSRecon

A PowerShell script for live forensic data acquisition and endpoint lockdown during Windows incident response.

PSFrameworkPowershellFrameworkCollective/psframework

A PowerShell module providing infrastructure for configuration management, logging, and improving script manageability.

MeerkatTonyPhipps/Meerkat

A PowerShell module collection for agentless artifact gathering and reconnaissance on Windows endpoints.

Seleniumadamdriscoll/selenium-powershell

A PowerShell module that wraps the Selenium WebDriver API for browser automation and testing.

PSTeamsEvotecIT/PSTeams

A PowerShell module for sending rich notifications to Microsoft Teams via webhooks, supporting Adaptive Cards, Hero Cards, List Cards, and Thumbnail Cards.

Invoke-ParallelRamblingCookieMonster/Invoke-Parallel

A PowerShell function for simplified parallel execution using runspaces to speed up scripts.

GraphicalPrateekKumarSingh/graphical

A PowerShell module that plots scatter, bar, and line graphs directly in the console using ASCII/Unicode characters.