Alternatives and similar repositories for ETWMonitor

Users that are interested in ETWMonitor are comparing it to the libraries listed below

• sadshade / veeam-creds
  Collection of scripts to retrieve stored passwords from Veeam Backup
  ☆133Updated 4 months ago
• SafeBreach-Labs / aikido_wiper
  ☆69Updated 2 years ago
• daddycocoaman / dumpscan
  Finding secrets in kernel and user memory
  ☆115Updated 2 years ago
• dr4k0nia / tooling-playground
  A collection of small scripts and tools for deobfuscation and malware analysis.
  ☆66Updated 2 years ago
• QueenSquishy / plague
  Default Detections for EDR
  ☆96Updated last year
• mlcsec / FormThief
  Spoofing desktop login applications with WinForms and WPF
  ☆176Updated last year
• georgesotiriadis / MalwareDev
  ☆84Updated 3 years ago
• MalwareTech / HiddenDesktop
  Create and enumerate hidden desktops.
  ☆88Updated last year
• hackerhouse-opensource / WMIProcessWatcher
  A CIA tradecraft technique to asynchronously detect when a process is created using WMI.
  ☆136Updated last year
• ghostpepper108 / Evasion
  ☆107Updated 2 years ago
• ashemery / Anti-Forensics
  A Repository to Track Anti-Forensic Techniques
  ☆113Updated 2 years ago
• hackerhouse-opensource / Artillery
  CIA UAC bypass implementation that utilizes elevated COM object to write to System32 and an auto-elevated process to execute as administr…
  ☆182Updated last year
• CICADA8-Research / MyMSIAnalyzer
  Analyse MSI files for vulnerabilities
  ☆138Updated last year
• ignacioj / WhacAMole
  Live memory analysis detecting malware IOCs in processes, modules, handles, tokens, threads, .NET assemblies, memory address space and en…
  ☆42Updated last year
• LOFL-Project / LOFLCAB
  ☆55Updated 10 months ago
• FourCoreLabs / LolDriverScan
  Scan vulnerable drivers on Windows with loldrivers.io
  ☆186Updated 2 years ago
• p0dalirius / ldap2json
  The ldap2json script allows you to extract the whole LDAP content of a Windows domain into a JSON file.
  ☆139Updated 11 months ago
• soufianetahiri / RansomwareSimulator.public
  Ransomware simulator written in C#
  ☆37Updated 3 years ago
• LaresLLC / ScrapingKit
  Scraping Kit is made up of several tools for scraping services for keywords, useful for initial enumeration of Domain Controllers or if y…
  ☆99Updated 2 years ago
• markuta / bw-dump
  A proof-of-concept for (CVE-2023-38840) that extracts plaintext master passwords from a locked Bitwarden vault.
  ☆41Updated last year
• notdodo / LocalAdminSharp
  .NET executable to use when dealing with privilege escalation on Windows to gain local administrator access
  ☆158Updated 2 years ago
• itaymigdal / LOLSpoof
  An interactive shell to spoof some LOLBins command line
  ☆186Updated last year
• mgeeky / msidump
  MSI Dump - a tool that analyzes malicious MSI installation packages, extracts files, streams, binary data and incorporates YARA scanner.
  ☆219Updated 2 years ago
• icyguider / NewPowerDNS
  Updated version of PowerDNS by @domchell. Adds support for transfers over DNS A records and a few other useful features.
  ☆84Updated 2 years ago
• xaitax / PatchaPalooza
  A comprehensive tool that provides an insightful analysis of Microsoft's monthly security updates.
  ☆189Updated 7 months ago
• MzHmO / Privileger
  Privileger is a tool to work with Windows Privileges
  ☆137Updated 2 years ago
• TierZeroSecurity / edr_blocker
  Blocks EDR Telemetry by performing Person-in-the-Middle attack where network filtering is applied using iptables. The blocked destination…
  ☆140Updated last year
• sensepost / mydumbedr
  ☆120Updated last year
• Octoberfest7 / DNS_Tunneling
  DNS Tunneling using powershell to download and execute a payload. Works in CLM.
  ☆229Updated 3 years ago
• RemiEscourrou / PowerShellMisc
  ☆35Updated 3 years ago