Osprey – An Alternative to the Hawk PowerShell Module for Email Compromise Investigations

Unfortunately, Hawk is no longer working properly due to the deprecation of the Search-AdminAuditLog cmdlet. The good news is that there is an alternative!

Osprey is my fork of Hawk. It has (mostly) fixed the issues with deprecated cmdlets and dependant modules, and has added a truckload of QoL improvements and additional investigation signals.

You can find information about osprey from two places, PowerShell Gallery, or the GitHub repo. Any feedback or contributions are welcome!

To install Osprey, run the following in a PowerShell terminal: Install-Module -Name Osprey

I hope you’ll give it a try and let me know what you think.

Comments

No comments yet. Why don’t you start the discussion?

Leave a Reply

Your email address will not be published. Required fields are marked *