PersistenceSniper by last-byte

Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte

created at July 20, 2022, 7:19 a.m.

PowerShell

40 +0

1,810 +5

175 +0

GitHub
AutoRuns by p0w3rsh3ll

🚀AutoRuns is a PowerShell module that will help do live incident response and enumerate autoruns artifacts that may be used by legitimate programs as well as malware to achieve persistence.

created at Jan. 7, 2016, 10:24 p.m.

PowerShell

16 +0

235 +0

39 +0

GitHub
PowerSponse by swisscom

PowerSponse is a PowerShell module focused on targeted containment and remediation during incident response.

created at Sept. 14, 2017, 9:15 a.m.

PowerShell

15 +0

36 +0

6 +0

GitHub