This module provides the ability to query the speculation control settings for the system.

Adds cmdlets that can be used to enable/disable/remove privileges on a process. Also adds cmdlets that can be used to configure the members of Windows rights and privileges. See https://github.com/jborean93/PSPrivilege for more info

Microsoft Azure PowerShell - Azure Security Center cmdlets in Windows PowerShell and PowerShell Core. Allows managing and monitoring the security posture of your resources. For more information on Security Center, please visit the following: https://learn.microsoft.com/azure/security-center

Carbon is a PowerShell module for automating the configuration Windows 7, 8, 2008, and 2012 and automation the installation and configuration of Windows applications, websites, and services. It can configure and manage: * Local users and groups * IIS websites, virtual directories, and applications * File system, registry, and certificate pe... More info

The DSInternals PowerShell Module exposes several internal features of Active Directory and Azure Active Directory. These include FIDO2 and NGC key auditing, offline ntds.dit file manipulation, password auditing, DC recovery from IFM backups and password hash calculation. DISCLAIMER: Features exposed through this module are not supported by Micr... More info

Splits a DBX update package into the new DBX variable contents and the signature authorizing the change. To apply an update using the output files of this script, try: Set-SecureBootUefi -Name dbx -ContentFilePath .\content.bin -SignedFilePath .\signature.p7 -Time 2010-03-06T19:17:21Z -AppendWrite'

AutoRuns is a module that will help do live incident response and enumerate autoruns artifacts that may be used by legitimate programs as well as malware to achieve persistence

PowerShell client module for the ACME protocol Version 2, which can be used to interoperate with the Let's Encrypt(TM) projects certificate servers and any other RFC 8555 compliant server.

The AADInternals PowerShell Module utilises several internal features of Azure Active Directory, Office 365, and related admin tools. AADInternals allows you to export ADFS certificates, Azure AD Connect passwords, and modify numerous Azure AD / Office 365 settings not otherwise possible. DISCLAIMER: Functionality provided through this module... More info

This module adds a provider and cmdlets to access the NT object manager namespace.

A PowerShell module that runs Atomic Red Team tests from yaml definition files.

Module for CyberArk Privileged Access Security Web Service REST API

Client library for the ACME protocol, which is used to interoperate with the Let's Encrypt project's CA server and any other ACME-compliant server.

The Microsoft Security Response Center module gets Microsoft Security Update details and CVRF (Common Vulnerability Reporting Format) documents in either JSON or XML. This module calls the MSRC API (api.msrc.microsoft.com).

Interact with the Secret Server REST API

A PowerShell toolbox for Microsoft 365 security fans.

A module to facilitate the testing of attack techniques and their corresponding procedures.

Harden Windows Safely, Securely, only with Official Microsoft methods - 🦄 Intune - 🧩 Group Policy - 🛡️ Local - ☁️ Cloud (All scenarios supported 💯) ⭕ This module provides 3 main features: Hardening, Auditing/checking the system compliance, and undoing the Hardening ⭕ Please read the GitHub's readme before running this module: https://gi... More info

NetCease is a module that will help disable Net Session Enumeration

Microsoft 365 Incident Response and Threat Hunting PowerShell tool. The Hawk is designed to ease the burden on M365 administrators who are performing Cloud forensic tasks for their organization. It accelerates the gathering of data from multiple sources in the service that be used to quickly identify malicious presence and activity.