Alternatives and similar repositories for EDRNoiseMaker:

Users that are interested in EDRNoiseMaker are comparing it to the libraries listed below

• rad9800 / FileRenameJunctionsEDRDisable
  ☆143Updated 2 months ago
• mertdas / SharpLateral
  Lateral Movement
  ☆122Updated last year
• EvilBytecode / Lifetime-Amsi-EtwPatch
  Two in one, patch lifetime powershell console, no more etw and amsi!
  ☆83Updated 7 months ago
• TierZeroSecurity / edr_blocker
  Blocks EDR Telemetry by performing Person-in-the-Middle attack where network filtering is applied using iptables. The blocked destination…
  ☆141Updated 6 months ago
• cbecks2 / edr-artifacts
  This repository is meant to catalog network and host artifacts associated with various EDR products "shell" and response functionalities.
  ☆76Updated 5 months ago
• CCob / Shwmae
  ☆142Updated 3 weeks ago
• iamagarre / BadExclusionsNWBO
  BadExclusionsNWBO is an evolution from BadExclusions to identify folder custom or undocumented exclusions on AV/EDR
  ☆73Updated last year
• lkarlslund / hashmuncher
  Grab NetNTLMv2 hashes using ETW with administrative rights on Windows 8.1 / Windows Server 2016 and later
  ☆91Updated last year
• Offensive-Panda / LsassReflectDumping
  This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone…
  ☆185Updated 4 months ago
• Leo4j / Invoke-SMBRemoting
  Interactive Shell and Command Execution over Named-Pipes (SMB) for Fileless lateral movement
  ☆158Updated 2 months ago
• QueenSquishy / plague
  Default Detections for EDR
  ☆97Updated last year
• BC-SECURITY / ScriptBlock-Smuggling
  Example code samples from our ScriptBlock Smuggling Blog post
  ☆88Updated 8 months ago
• HuskyHacks / SharpTokenFinder
  C# implementation of TokenFinder. Steal M365 access tokens from Office Desktop apps
  ☆135Updated 6 months ago
• t94j0 / adexplorersnapshot-rs
  ☆74Updated 6 months ago
• Hagrid29 / AbuseAzureAPIPermissions
  Abuse Azure API permissions for red teaming
  ☆61Updated 2 years ago
• trustedsec / specula
  ☆188Updated 4 months ago
• paranoidninja / Cobaltstrike-Detection
  This repo will contain the core detection, only for Cobaltstrike's leaked versions. Non-leaked version detections wont be shared
  ☆88Updated last year
• t3hbb / PanGP_Extractor
  Tool to extract username and password of current user from PanGPA in plaintext
  ☆82Updated last month
• mlcsec / SharpGraphView
  Microsoft Graph API post-exploitation toolkit
  ☆93Updated 7 months ago
• xpn / CloudInject
  ☆107Updated 3 months ago
• WKL-Sec / GregsBestFriend
  GregsBestFriend process injection code created from the White Knight Labs Offensive Development course
  ☆180Updated last year
• rotarydrone / GlobalUnProtect
  Decrypt GlobalProtect configuration and cookie files.
  ☆142Updated 5 months ago
• bitsadmin / lofl
  Living Off the Foreign Land setup scripts
  ☆64Updated last month
• dsnezhkov / shutter
  ☆115Updated 3 years ago
• gsmith257-cyber / better-sliver
  Adversary Emulation Framework
  ☆66Updated 6 months ago
• Octoberfest7 / Enumprotections_BOF
  A BOF to enumerate system process, their protection levels, and more.
  ☆113Updated 2 months ago
• itaymigdal / LOLSpoof
  An interactive shell to spoof some LOLBins command line
  ☆182Updated last year
• X-C3LL / SharpNTLMRawUnHide
  C# version of NTLMRawUnHide
  ☆72Updated 2 years ago
• danti1988 / adcshunter
  Uses rpcdump to locate the ADCS server, and identify if ESC8 is vulnerable from unauthenticated perspective.
  ☆78Updated 5 months ago