OTRF / BHEU22-ADFS
Writing Your Own Ticket to the Cloud Like APT: A Deep-dive to AD FS Attacks, Detections, and Mitigations
☆12Updated 2 years ago
Alternatives and similar repositories for BHEU22-ADFS:
Users that are interested in BHEU22-ADFS are comparing it to the libraries listed below
- Dump Lsass Memory Using a Reflective Dll☆14Updated 2 years ago
- Extension functionality for the NightHawk operator client☆26Updated last year
- ☆32Updated 2 years ago
- The repository accompanying the Buer Emulation workshop☆24Updated 3 years ago
- Identifies metadata of .NET binary files.☆21Updated 9 months ago
- Adapt practically persistence steadiness strategies working at Windows 10 utilized by sponsored nation-state threat actors, as Turla, Pro…☆20Updated 4 years ago
- Progress of learning kernel development☆14Updated 2 years ago
- ☆22Updated last year
- A collection of my presentation materials.☆16Updated 9 months ago
- ☆35Updated 8 months ago
- ☆45Updated last year
- ☆18Updated 3 weeks ago
- ☆18Updated 10 months ago
- C code to enable ETW tracing for Dotnet Assemblies☆30Updated 2 years ago
- Defeating Anti-Debugging Techniques for Malware Analysis☆13Updated 2 years ago
- An example of COM hijacking using a proxy DLL.☆25Updated 3 years ago
- the Open Source and Pure C++ Packer for eXecutables☆18Updated last year
- Rapidly building a Windows 10 system to use for dynamic malware analysis (sandbox), sending data to Elastic Cloud.☆46Updated last year
- Small tool to play with IOCs caused by Imageload events☆42Updated last year
- ProcDot Malware Sandbox☆22Updated 2 months ago
- ☆23Updated 2 years ago
- CyberWarFare Labs hands-on workshop on the topic "Detecting Adversarial Tradecrafts/Tools by leveraging ETW"☆46Updated 2 years ago
- Get-PDInvokeImports is tool (PowerShell module) which is able to perform automatic detection of P/Invoke, Dynamic P/Invoke and D/Invoke u…☆53Updated 2 years ago
- Continuous kerberoast monitor☆44Updated last year
- WMI SA stuffs☆29Updated 2 years ago
- Remote code execution in Power Platform connectors via JSON deserialization☆20Updated last year
- ☆26Updated 3 months ago
- A cap/pcap packet parser to make life easier when performing stealth/passive reconnaissance.☆21Updated 6 months ago
- ☆12Updated 2 years ago
- Simple and sane cryptographic wrapper library.☆26Updated last year