Windows notifier tool that detects suspicious connections by monitoring ETW event logs
☆124Dec 8, 2022Updated 3 years ago
Alternatives and similar repositories for ETWMonitor
Users that are interested in ETWMonitor are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- VULNSPY regularly retrieves the latest alerts published by the CERT-FR and the related vulnerabilities with their CVSS score and allows y…☆38Nov 3, 2022Updated 3 years ago
- A launcher to load a DLL with xored cobalt strike shellcode executed in memory through process hollowing technique☆29Nov 11, 2022Updated 3 years ago
- ☆118Aug 7, 2022Updated 3 years ago
- Python script for extracting and decrypting Group Policy Preferences passwords☆26May 28, 2021Updated 5 years ago
- WCRT CMake build☆11Mar 26, 2014Updated 12 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Enumerate various traits from Windows processes as an aid to threat hunting☆201Jan 13, 2022Updated 4 years ago
- Searching .evtx logs for remote connections☆24Jul 6, 2023Updated 3 years ago
- Deleting Shadow Copies In Pure C++☆118Oct 31, 2022Updated 3 years ago
- Small tool to play with IOCs caused by Imageload events☆47May 14, 2023Updated 3 years ago
- A Poc on blocking Procmon from monitoring network events☆112Aug 7, 2025Updated 11 months ago
- RemClip is a C# project which permits to steal user clipboard data and send it to a remote web server under attacker control☆15Sep 2, 2024Updated last year
- RPC Monitor based on The ETW Microsoft-Windows-Rpc provider☆24Mar 22, 2020Updated 6 years ago
- WTSRM☆216Aug 7, 2022Updated 3 years ago
- ETWProcessMon2 is for Monitoring Process/Thread/Memory/Imageloads/TCPIP via ETW + Detection for Remote-Thread-Injection & Payload Detecti…☆322Mar 20, 2024Updated 2 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- ☆164Dec 30, 2022Updated 3 years ago
- Hekatomb is a python script that connects to LDAP directory to retrieve all computers and users informations. Then it will download all D…☆524Jul 31, 2024Updated last year
- Dont Call Me Back - Dynamic kernel callback resolver. Scan kernel callbacks in your system in a matter of seconds!☆255Jul 9, 2024Updated 2 years ago
- Tools and PoCs for Windows syscall investigation.☆364Dec 2, 2025Updated 7 months ago
- Bypass Detection By Randomising ROR13 API Hashes☆142Feb 24, 2022Updated 4 years ago
- laZzzy is a shellcode loader, developed using different open-source libraries, that demonstrates different execution techniques.☆506Jan 10, 2023Updated 3 years ago
- Example of async client/server sockets in .NET 5☆17Jun 9, 2021Updated 5 years ago
- Retrieve and display information about active user sessions on remote computers. No admin privileges required.☆211Aug 12, 2024Updated last year
- apkfram was written in order to help any mobile penetration testers to identify the Framework used to develop the Android application.☆12Oct 9, 2024Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A C# port of https://gist.github.com/adamsvoboda/8f29e09d74b73e1dec3f9049c4358e80☆21Apr 2, 2025Updated last year
- Six cases demonstrating methods of optimizing GetProcAddress☆19Jan 3, 2022Updated 4 years ago
- List the ETW provider(s) in the registration table of a process.☆81Sep 20, 2023Updated 2 years ago
- A simple WPF interface for Active Directory user password reset☆57Jun 11, 2024Updated 2 years ago
- Cmdlets for capturing Windows Events☆14Mar 11, 2022Updated 4 years ago
- Криптор на шелл-кодах☆11May 3, 2020Updated 6 years ago
- Ludus roles to deploy ASR rules and MDI auditing settings☆25Aug 5, 2025Updated 11 months ago
- A fake AMSI Provider which can be used for persistence.☆160May 16, 2021Updated 5 years ago
- Antivirus Signature Search Toolkit☆81Apr 30, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Beacon Object File Loader☆295Dec 3, 2023Updated 2 years ago
- This aggressor script uses a beacon's note field to indicate the health status of a beacon.☆143Sep 29, 2021Updated 4 years ago
- ☆121Dec 23, 2022Updated 3 years ago
- Weaponizing to get NT SYSTEM for Privileged Directory Creation Bugs with Windows Error Reporting☆364Dec 19, 2022Updated 3 years ago
- rust clr heap encryption (https://github.com/lap1nou/CLR_Heap_encryption), but no heap encryption.☆17Jan 6, 2024Updated 2 years ago
- ☆103Oct 7, 2023Updated 2 years ago
- UAC bypass for x64 Windows 7 - 11☆847Feb 2, 2026Updated 5 months ago