Search
Security · PowerShell · For devops and sre engineers
Skills
Sort:BestMost starsTrending todayTrending this weekTrending this monthNewestRecently updatedName
| # | Skill | Repository | Stars | Used in | Tokens | Auto-check | Licence | Updated |
|---|---|---|---|---|---|---|---|---|
| 1 | Update copyright year references across the project at the beginning of each calendar year. | MichaelGrafnetter/ | 2k | — | ~404 | Automated safety check: Pass | MIT | 1 mo ago |
| 2 | Runs a hypothesis-driven threat hunt for Volume Shadow Copy deletion (T1490) by querying SIEM/EDR telemetry for vssadmin, wmic shadowcopy, and PowerShell shadow-copy-deletion commands. | mukul975/ | 34k | — | ~891 | Automated safety check: Pass | Apache-2.0 | 1 mo ago |
| 3 | Run Chainsaw against collected Windows EVTX files to hunt with the SigmaHQ rule corpus, built-in detection rules, and high-speed keyword/regex search, plus analyze shimcache, SRUM, and event-log… | mukul975/ | 34k | — | ~2.1k | Automated safety check: Pass | Apache-2.0 | 1 mo ago |
| 4 | Hunt for malicious PowerShell activity by analyzing Script Block Logging (Event 4104), Module Logging (Event 4103), and process creation events. | mukul975/ | 34k | — | ~638 | Automated safety check: Pass | Apache-2.0 | 1 mo ago |
| 5 | Conduct proactive, hypothesis-driven threat hunts — search SIEM / EDR / logs for adversaries who haven't tripped an alert yet. | briiirussell/ | 413 | — | ~2.9k | Automated safety check: Notes | MIT | 4 mo ago |
| 6 | Blue-team CLI threat hunt over Windows Event Logs. An agent skill from ptn1411/skill. | ptn1411/ | 219 | — | ~1k | Automated safety check: Notes | No licence | 20 days ago |
| 7 | Windows net diag: ping, traceroute, DNS, port scan (PowerShell) | taracodlabs/ | 852 | — | ~878 | Automated safety check: Pass | Apache-2.0 | 28 days ago |