
Invoke-DumpMDEConfig
PowerShell script to dump Microsoft Defender Config, protection history and Exploit Guard Protection History (no admin privileges required )

PowerShell script to dump Microsoft Defender Config, protection history and Exploit Guard Protection History (no admin privileges required )

PowerShell Script to Dump Windows Credentials from the Credential Manager

PowerShell enumeration script for discovering service-backed COM objects via CLSID/AppID correlation and activation testing.

powershell tool for VM evasion

Automated Active Directory auditing and enumeration tool that generates detailed HTML audit reports with CSV/XLSX export, designed for security…

C# tool that enumerates running processes, loaded DLLs, installed services, and drivers to detect the presence of AV, EDR, and logging products,…

This cheatsheet maps common impacket workflows to their modern alternatives