A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.

Red Teaming Tactics and Techniques

Re-play Security Events

Invoke-AtomicRedTeam is a PowerShell module to execute tests as defined in the [atomics folder](https://github.com/redcanaryco/atomic-red-team/tree/master/atomics) of Red Canary's Atomic Red Team p…

SIEM Tactics, Techiques, and Procedures

A collection of red team and adversary emulation resources developed and released by MITRE.

Documentation and supporting script sample for Windows Exploit Guard

PowerShell Conference Europe 2017 Slides and Demo Scripts

PowerShell No Agent Hunting

Invoke-Forensics provides PowerShell commands to simplify working with the forensic tools KAPE and RegRipper.

Quick PowerShell script to extract any exclusions configured for Windows Defender