Pinned Loading

1. hAcKtive-Directory-Forensics hAcKtive-Directory-Forensics Public

   54 9

2. Get-RemotePSSession Get-RemotePSSession Public

   Query PS Sessions/WS-Man for their connected users, IPs, hosts, session times and more, for local and remote sessions, both Windows PowerShell and pwsh

   PowerShell 11 3

3. WindowsMemoryThreatAnalysis WindowsMemoryThreatAnalysis Public

   Comprehensive memory threat analysis for process memory regions. Scan process(es) for suspicious patterns (protection+hex/strings), map memory regions to threads; then analyze for threats & produce…

   PowerShell 1

4. Get-LogonCount Get-LogonCount Public

   Count logons (queries the logonCount attribute from all domain controllers, for users and/or computers, all or specific accounts)

   PowerShell 2

5. Get-UserSession Get-UserSession Public

   Query user sessions for the entire domain (Interactive/RDP etc), allowing you to query a Username and see all their logged on sessions, whether Active or Disconnected

   PowerShell 92 9

6. Get-NetSessionEnum Get-NetSessionEnum Public

   Automate Network sessions enumeration of connected users in the domain, to facilitate AD Reconnaissance for Adversary simulation & Red Teams

   PowerShell 21 6