Pinned Loading

1. hAcKtive-Directory-Forensics hAcKtive-Directory-Forensics Public

   54 11

2. Get-RemotePSSession Get-RemotePSSession Public

   Query PS Sessions/WS-Man for their connected users, IPs, hosts, session times and more, for local and remote sessions, both Windows PowerShell and pwsh

   PowerShell 11 3

3. Get-LogonCount Get-LogonCount Public

   Count AD account(s) logons - Queries the logonCount attribute from all domain controllers (RWDC + RODC) for all or specific user accounts (and optionally computer accounts), with additional statist…

   PowerShell 3 1

4. SEC-T_21-One-Liners-Powershell SEC-T_21-One-Liners-Powershell Public

   Code & other materials from SEC-T 2022 talk "When SysAdmin & Hacker Unite: 21 One-Liners to make you convert from bash to Powershell"

   PowerShell 16 3

5. Get-UserSession Get-UserSession Public

   Query user sessions for the entire domain (Interactive/RDP etc), allowing you to query a Username and see all their logged on sessions, whether Active or Disconnected

   PowerShell 93 9

6. Detect-FileTypeFromBase64Prefix Detect-FileTypeFromBase64Prefix Public

   Detect likely file types by signature (hex/ASCII) and show Base64 prefix. Loads a JSON signature map, reads minimal bytes to test offset & shows matched signature for each file. optional export res…

   PowerShell 1