MSAdministrator / msi-utilsLinks
A python package that helps with analysis of MSI files
☆14Updated 4 years ago
Alternatives and similar repositories for msi-utils
Users that are interested in msi-utils are comparing it to the libraries listed below
Sorting:
- A Canary which fires when uninstalled☆34Updated 4 years ago
- ☆33Updated 3 years ago
- The repository accompanying the Buer Emulation workshop☆24Updated 3 years ago
- A cap/pcap packet parser to make life easier when performing stealth/passive reconnaissance.☆21Updated last year
- USB HID driver emulation with PID/VID (0x3bca/0x27bb) of Plenom A/S Busylight Alpha, that is supported by Mimikatz. When mimikatz is exec…☆20Updated 2 years ago
- A collection of my presentation materials.☆17Updated last year
- ☆11Updated 4 years ago
- Modular malware analysis artifact collection and correlation framework☆53Updated last year
- Continuous kerberoast monitor☆45Updated last year
- This is a repo for fetching Applocker event log by parsing the win-event log☆31Updated 2 years ago
- Rapidly building a Windows 10 system to use for dynamic malware analysis (sandbox), sending data to Elastic Cloud.☆50Updated last year
- Parser for Windows PowerShell script block logs☆13Updated 6 months ago
- ☆12Updated 4 years ago
- ☆18Updated 2 weeks ago
- A list of IOCs applicable to PoshC2☆24Updated 4 years ago
- Epimitheus is a tool that uses graphical database Neo4j for Windows Events visualization.☆19Updated 3 years ago
- Collection of generic YARA rules☆16Updated last year
- Using Microsoft 365 App Passwords for persistence☆23Updated 4 years ago
- Takes the original idea of NetCease and adds functionality☆24Updated 3 years ago
- Speaking materials from conferences I've given☆9Updated 2 years ago
- Go module that allows you to authenticate to Azure with a well known client ID using interactive logon and grab the token☆26Updated 2 years ago
- Python tool to find vulnerable AD object and generating csv report☆14Updated 3 years ago
- Defeating Anti-Debugging Techniques for Malware Analysis☆13Updated 2 years ago
- C# User Simulation☆32Updated 2 years ago
- Reproducible and extensible BloodHound playbooks☆44Updated 5 years ago
- OMIGOD! OM I GOOD? A free scanner to detect VMs vulnerable to one of the "OMIGOD" vulnerabilities discovered by Wiz's threat research tea…☆20Updated 3 years ago
- This project provides Base64 encoding and decoding functionality to PowerShell within Constrained Language Mode☆26Updated last year
- Repository for LNK stuff☆30Updated 2 years ago
- Dumping credentials through windbg and pykd☆41Updated last year
- A set of tools for collecting forensic information☆26Updated 5 years ago