GitHub repository: Invoke-IR/Uproot
Primary language: PowerShell
Description: Agentless Host-Based IDS written in PowerShell, leveraging WMI Permanent Event Subscriptions