Alternatives and similar repositories for ProcessHuntingToolkit

Users that are interested in ProcessHuntingToolkit are comparing it to the libraries listed below

• jaredcatkinson / MalwareMorphology
  ☆84Updated last year
• QueenSquishy / plague
  Default Detections for EDR
  ☆97Updated last year
• cbecks2 / edr-artifacts
  This repository is meant to catalog network and host artifacts associated with various EDR products "shell" and response functionalities.
  ☆92Updated last year
• CroodSolutions / AutoRMM
  AutoRMM is a collection of scripts and instructions we are organizing, to test delivery mechanisms for RMM and screen sharing tools, alo…
  ☆91Updated 6 months ago
• magicsword-io / LOLBASline
  Baseline a Windows System against LOLBAS
  ☆70Updated this week
• MHaggis / NEBULA
  Interactive PowerShell framework for testing WMI, COM, LOLBAS, and persistence techniques
  ☆89Updated last month
• S3N4T0R-0X0 / APT28-Adversary-Simulation
  This is a simulation of attack by Fancy Bear group (APT28) targeting high-ranking government officials Western Asia and Eastern Europe
  ☆38Updated last year
• MazX0p / CobaltSentry
  ☆24Updated 11 months ago
• ACE-Responder / ace-proctree
  Create a cool process tree like https://twitter.com/ACEResponder.
  ☆35Updated 2 years ago
• 0xe7 / WonkaVision
  ☆86Updated 3 years ago
• outflanknl / Training-MSOfficeOffensiveTradecraft
  Info related to the Outflank training: Microsoft Office Offensive Tradecraft
  ☆52Updated last year
• Antonlovesdnb / ConstructingDefenseLab
  Ludus range for the Constructing Defense Lab
  ☆73Updated 2 months ago
• BlackSnufkin / CheckPlz
  Scan files for potential threats while leveraging AMSI (Antimalware Scan Interface) and Windows Defender. By isolating malicious content.
  ☆36Updated last year
• amjcyber / EDRNoiseMaker
  Detect WFP filters blocking EDR communications
  ☆96Updated 2 years ago
• infosecn1nja / Invoke-AtomicAssessment
  Invoke-AtomicAssessment is a powerful tool designed to facilitate adversary emulation by leveraging Atomic Red Team.
  ☆44Updated last year
• CroodSolutions / BeaconatorC2
  BeaconatorC2 is a framework for red teaming and adversarial emulation, providing a full-featured management interface, along with a catal…
  ☆92Updated 3 weeks ago
• Helixo32 / SimpleEDR
  Simple EDR that injects a DLL into a process to place a hook on specific Windows API
  ☆96Updated 2 years ago
• bitsadmin / lofl
  Living Off the Foreign Land setup scripts
  ☆74Updated 11 months ago
• elementalsouls / DumpLSASS
  ☆33Updated last year
• SadProcessor / BloodHoundOperator
  BloodHound PowerShell client
  ☆76Updated last month
• Sam0x90 / CTI
  Repo containing various intel-based resources such as threat research, adversary emulation/simulation plan and so on
  ☆83Updated last year
• ASOT-LABS / TeamsBreaker
  ☆47Updated 2 years ago
• Cyb3rWard0g / HF-Agents-Course-Notes
  My Notes from Hugging Face AI Agents Course
  ☆20Updated 11 months ago
• sidaf / moonshine
  ☆70Updated 2 years ago
• Cyb3r-Monk / ACCD
  Active C&C Detector
  ☆155Updated 2 years ago
• vc0RExor / Malware-Threat-Reports
  A full analysis report detailing as much as possible of a Malware or a Threat
  ☆32Updated last week
• knight0x07 / OneNoteAnalyzer
  A C# based tool for analysing malicious OneNote documents
  ☆118Updated 2 years ago
• olafhartong / BamboozlEDR
  A comprehensive ETW (Event Tracing for Windows) event generation tool designed for testing and research purposes.
  ☆257Updated 4 months ago
• Pascal-0x90 / sideloadr
  Small Python tool to do DLL Sideloading (and consequently, other DLL attacks).
  ☆58Updated 3 years ago
• SafeBreach-Labs / aikido_wiper
  ☆68Updated 3 years ago