#1
PowerShell Digital Forensics & Incident Response Scripts.
797 starsMay 26, 2026 pushdevopsPowerShellIncident Response
$ npx skills add Bert-JanP/Incident-Response-PowershellAlternatives
Microsoft Analyzer Suite alternatives for AI agents.
Compare similar skills by workflow fit, trust score, quality, GitHub adoption, maintenance, and install readiness.
Current skill
Microsoft Analyzer Suite
A collection of PowerShell scripts for analyzing data from Microsoft 365 and Microsoft Entra ID
85
Quality
84
Trust
634
Stars
#2
MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR
720 starsMay 2, 2026 pushdevopsPowerShellIncident Response
$ npx skills add LETHAL-FORENSICS/MemProcFS-Analyzer#3
The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
3.1K starsJun 12, 2026 pushdevopsCIncident Response
$ npx skills add sleuthkit/sleuthkit#4
PagerDuty's Incident Response Documentation.
1.0K starsApr 9, 2026 pushdevopsDockerfileIncident Response
$ npx skills add PagerDuty/incident-response-docs#5
PowerShell script helping Incident Responders discover potential adversary persistence mechanisms.
330 starsMay 1, 2025 pushdevopsPowerShellIncident Response
$ npx skills add joeavanzato/Trawler#6
Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte
2.1K starsDec 11, 2024 pushdevopsPowerShellIncident Response
$ npx skills add last-byte/PersistenceSniper#7
Cover various security approaches to attack techniques and also provides new discoveries about security breaches.
488 starsApr 17, 2025 pushdevopsPowerShellIncident Response
$ npx skills add LearningKijo/SecurityResearcher-Note#8
Set of Mindmaps providing a detailed overview of the different #Microsoft auditing capacities for Windows, Exchange, Azure,...
1.1K starsNov 8, 2025 pushdevopsIncident ResponseClaude Code
$ npx skills add mdecrevoisier/Microsoft-eventlog-mindmap#9
FAME Automates Malware Evaluation
941 starsJun 13, 2026 pushdevopsPythonIncident Response
$ npx skills add certsocietegenerale/fame#10
List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.
9.5K starsApr 17, 2026 pushdevopsShellIncident Response
$ npx skills add toniblyx/my-arsenal-of-aws-security-tools#11
⚡️ Catalyst is a self-hosted, open source incident response platform and ticket system that helps to automate alert handling and incident response processes
530 starsJun 2, 2026 pushdevopsVueIncident Response
$ npx skills add SecurityBrewery/catalyst#12
game of active directory
7.9K starsMar 12, 2026 pushdevopsPowerShellTerraform
$ npx skills add Orange-Cyberdefense/GOAD#13
Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
3.2K starsJun 7, 2026 pushdevopsRustIncident Response
$ npx skills add Yamato-Security/hayabusa#14
Volatility 3.0 development
4.2K starsMay 26, 2026 pushdevopsPythonIncident Response
$ npx skills add volatilityfoundation/volatility3#15
Digging Deeper....
4.0K starsJun 16, 2026 pushdevopsGoIncident Response
$ npx skills add Velocidex/velociraptor#16
Forensics artefact collection tool for systems running Microsoft Windows
440 starsJun 16, 2026 pushdevopsC++Incident Response
$ npx skills add DFIR-ORC/dfir-orcHow to choose
When should you switch?
Use an alternative when it has a clearer install path, higher trust score, fresher maintenance, or better platform fit for your current agent stack. Keep Microsoft Analyzer Suite if it already passes your workflow test and repository review.
Next step
Compare top candidates side by side
Open the compare page, test the install commands in a sandbox, and check each repository before using a skill in production.