Detect WFP filters blocking EDR communications
☆99Jan 5, 2024Updated 2 years ago
Alternatives and similar repositories for EDRNoiseMaker
Users that are interested in EDRNoiseMaker are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the …☆1,912Nov 3, 2024Updated last year
- Leverage a legitimate WFP callout driver to prevent EDR agents from sending telemetry☆482Aug 2, 2024Updated 2 years ago
- ☆160Dec 13, 2024Updated last year
- A C# port from Invoke-GhostTask☆120Jan 5, 2024Updated 2 years ago
- rust clr heap encryption (https://github.com/lap1nou/CLR_Heap_encryption), but no heap encryption.☆17Jan 6, 2024Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ApexLdr is a DLL Payload Loader written in C☆116Jul 17, 2024Updated 2 years ago
- TypeLib persistence technique☆151Oct 22, 2024Updated 2 years ago
- Monitors ETW for security relevant syscalls maintaining the set called by each unique process☆90May 17, 2023Updated 3 years ago
- ☆43Feb 18, 2025Updated last year
- ☆99Sep 1, 2024Updated 2 years ago
- DFSCoerce exe revisited version with custom authentication☆43Jan 13, 2024Updated 2 years ago
- Detects Module Stomping as implemented by Cobalt Strike☆17Dec 13, 2020Updated 5 years ago
- ☆306Oct 29, 2024Updated 2 years ago
- Sleep obfuscation☆275Dec 13, 2024Updated last year
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- ☆106Oct 7, 2023Updated 3 years ago
- In-memory hiding technique☆66Jan 5, 2025Updated last year
- A Powershell AMSI Bypass technique via Vectored Exception Handler (VEH). This technique does not perform assembly instruction patching, f…☆176May 30, 2024Updated 2 years ago
- Report and exploit of CVE-2024-21305.☆43Jan 14, 2024Updated 2 years ago
- monitors hidden syscalls called from call of duty anticheat☆88Jan 13, 2025Updated last year
- Leverage WindowsApp createdump tool to obtain an lsass dump☆149Sep 20, 2024Updated 2 years ago
- A simple rpc2socks alternative in pure Go.☆31Jul 8, 2024Updated 2 years ago
- yet another AV killer tool using BYOVD☆317Dec 12, 2023Updated 2 years ago
- An interactive shell to spoof some LOLBins command line☆188Jan 27, 2024Updated 2 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Protect your Domain Controllers by auditing and restricting LDAP requests☆191May 29, 2025Updated last year
- SilentButDeadly is a network communication blocker specifically designed to neutralize EDR/AV software by preventing their cloud connecti…☆454Nov 3, 2025Updated 11 months ago
- ☆164Jul 31, 2022Updated 4 years ago
- Dumping LSASS by Unhooking MiniDumpWriteDump by getting a fresh DbgHelp.dll copy from the disk , plus functions and strings obfuscation☆32Sep 24, 2022Updated 4 years ago
- A POC to disable TamperProtection and other Defender / MDE components☆261Jun 6, 2024Updated 2 years ago
- Identify binaries with Authenticode digital signatures signed to an internal CA/domain☆41Feb 6, 2024Updated 2 years ago
- sync NIST's National Vulnerability Database into a local sqlite3 database☆14Apr 27, 2013Updated 13 years ago
- PowerShell Implementation of ADFSDump to assist with GoldenSAML☆45Jul 30, 2026Updated 3 months ago
- A beacon object file implementation of PoolParty Process Injection Technique.☆461Dec 21, 2023Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆213May 10, 2026Updated 5 months ago
- Shadow Dumper is a powerful tool used to dump LSASS memory, often needed in penetration testing and red teaming. It uses multiple advance…☆591May 22, 2025Updated last year
- A Dynamic MSBuild task to help with minor obfuscation of C# Binaries to evade static signatures on each compilation☆38Jul 30, 2026Updated 3 months ago
- ☆146Oct 29, 2024Updated 2 years ago
- Positional Independent Code to extract clear text password from mstsc.exe using API Hooking via HWBP.☆249Jun 11, 2024Updated 2 years ago
- SharpExShell automates the DCOM lateral movment technique which abuses ActivateMicrosoftApp method of Excel application.☆76May 1, 2024Updated 2 years ago
- Proof-of-Concept to evade auditd by tampering via ptrace☆19Aug 3, 2023Updated 3 years ago