An MCP to expose process monitoring and ETW tracing functionally to AI agents to assist in security work
☆91May 6, 2026Updated 6 months ago
Alternatives and similar repositories for ProcMon-MCP
Users that are interested in ProcMon-MCP are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Red-team your RAG pipeline for prompt injection, source-document leakage, and cross-document smuggling, in CI. The gap between RAG eval (…☆30Nov 3, 2026Updated last week
- Windows AppResolver LPE PoC with a filtered-admin-to-SYSTEM demonstration☆15Jul 17, 2026Updated 3 months ago
- An Ansible collection that installs an ADFS deployment with optional configurations.☆49May 23, 2026Updated 5 months ago
- MDE/MDI Defender setup for Ludus☆62Jul 30, 2026Updated 3 months ago
- A Model Context Protocol (MCP) server that gives AI agents live, stateful Windows RPC attack-surface research, built on James Forshaw's N…☆16Sep 30, 2026Updated last month
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- CVE-2026-88772 PoC: Citrix NetScaler ADC/Gateway DTLS memory overflow (RCE/DoS, CVSS 9.5). Fingerprints Gateway, build vs 14.1-73.37 / 13…☆13Oct 20, 2026Updated 3 weeks ago
- BloodHound MCP Server☆13Apr 8, 2026Updated 7 months ago
- Windows kernel research tool. Looks like a debugger, but it is not a debugger. It uses a kernel driver to provide a WinDbg-like live kern…☆73Nov 7, 2026Updated last week
- Ludus range for the Constructing Defense Lab☆144Jul 28, 2026Updated 3 months ago
- ☆52Jun 12, 2026Updated 5 months ago
- Jailbreaker is a local evaluation tool for testing chatbot and agent-style systems against jailbreak, prompt-injection, and related failu…☆118Updated this week
- An MCP server for procmon☆61Aug 30, 2026Updated 2 months ago
- A C# tool for requesting certificates from ADCS using DCOM over SMB. This tool allows you to remotely request X.509 certificates from CA …☆170Nov 2, 2025Updated last year
- WinDbg x64 extension that disassembles live functions and uses an LLM to produce verified pseudocode.☆113Jun 22, 2026Updated 4 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- BasicEventViewer4 (BEV v4.0), this code will useful for All Blue/Purple Teams , RealTime Monitoring Sysmon Events , Mitre Attack Detectio…☆18Jun 22, 2023Updated 3 years ago
- DSCourier is a proof-of-concept that uses the WinGet Configuration COM API to apply DSC configurations through Microsoft-signed binaries.☆211Jun 25, 2026Updated 4 months ago
- CVE-2026-50343 InstallService StaticPluginMap EoP - standard user to SYSTEM☆48Jul 16, 2026Updated 3 months ago
- MaLDAPtive is a framework for LDAP SearchFilter parsing, obfuscation, deobfuscation and detection.☆350Aug 7, 2024Updated 2 years ago
- Active Directory forensic framework☆16May 18, 2026Updated 5 months ago
- Powershell & Javascript Obfuscator☆50Aug 24, 2026Updated 2 months ago
- MalwareScan is a lightweight and fast malware scanner written in Python. It supports both Windows and Linux platforms and provides an ope…☆14Jun 2, 2025Updated last year
- SOCKS5 proxy tool that uses Azure Storage services as a means of communication.☆383Oct 26, 2026Updated 2 weeks ago
- An Ansible role that install the Adaptix C2 server and/or client on Debian based hosts☆180May 28, 2025Updated last year
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Ask the Web Account Manager (WAM) for Entra ID tokens☆170Sep 11, 2026Updated 2 months ago
- Memory API proxy via signed mozglue.dll☆41Jun 25, 2026Updated 4 months ago
- Security-first AI-native C5 teamserver (Command · Control · Cognitive · Collaborative · Coordination) for authorized red team & pentest. …☆58Updated this week
- Weaponize signed .NET ClickOnce applications for initial access by hijacking a dependency DLL via AppDomainManager injection and loading …☆172Feb 14, 2026Updated 9 months ago
- "Service-less" driver loading☆192Nov 28, 2024Updated last year
- Two WinForms GUI tools for enumerating, searching, and exfiltrating data from M365 environments using application-level OAuth tokens☆255Mar 4, 2026Updated 8 months ago
- ☆16May 3, 2024Updated 2 years ago
- Run TTPs, with AI!☆144Feb 23, 2026Updated 8 months ago
- Salesforce identity and permission graph collector for BloodHound CE. Maps users, profiles, permission sets, roles, groups, sharing rules…☆51Jul 30, 2026Updated 3 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- This repo would contain detection of various aws attack simulations.☆13Mar 5, 2026Updated 8 months ago
- Windows named pipe hooking toolkit☆46Mar 20, 2026Updated 7 months ago
- List of some AD tools I frequently use☆60Jun 30, 2026Updated 4 months ago
- ☆19Dec 25, 2025Updated 10 months ago
- Compose red team infrastructure and Active Directory ranges on a canvas, then compile to a complete Terraform and Ansible working directo…☆182Nov 6, 2026Updated last week
- DCOM in memory and fileless lateral movement techniques through .Net deserilization☆297Jun 22, 2026Updated 4 months ago
- Source code for complete MALicious softWARE books I & II☆80Oct 10, 2025Updated last year
Are these results useful?