Alternatives and similar repositories for PSDetour-Hooks:

Users that are interested in PSDetour-Hooks are comparing it to the libraries listed below

• zodiacon / TaskSched
  ☆28Updated 2 years ago
• jborean93 / PSDetour
  Windows Detour Hooking in PowerShell
  ☆78Updated 10 months ago
• SadProcessor / EzETW
  Cmdlets for capturing Windows Events
  ☆14Updated 3 years ago
• decoder-it / CreateTokenExample
  ☆17Updated 5 years ago
• rbmm / PPL
  run process as PPL Antimalware
  ☆10Updated last year
• DebugPrivilege / WindowsAP1
  Code samples that serve as references for Windows API functions
  ☆31Updated 11 months ago
• gpoguy / setpol
  Lets you write arbitrary registry entries to Group Policy related .pol files (e.g. registry.pol)
  ☆11Updated 5 years ago
• jsecurity101 / MSFT_DriverBlockList
  Repository of Microsoft Driver Block Lists based off of OS-builds
  ☆39Updated last year
• xforcered / AdvSim.Cryptography
  Simple and sane cryptographic wrapper library.
  ☆27Updated 2 years ago
• nickvangilder / To-Safe-Mode-And-Beyond
  A tool for leveraging elevated acess over a computer to boot the computer into Windows Safe Mode, alter settings, and then boot back into…
  ☆16Updated 3 years ago
• s4dbrd / ETWReader
  Read ETW Provider events. Inspired by ETWExplorer by Pavel Yosifovich
  ☆16Updated 10 months ago
• jborean93 / PSEtw
  PowerShell ETW consumer module
  ☆28Updated last year
• Kriegel / ComPower
  ComPower is a Windows PowerShell module to work with the Component Object Model (COM).
  ☆30Updated 10 years ago
• rbmm / Services
  ☆18Updated 4 months ago
• Devolutions / pwsh-host-rs
  Rust PowerShell Hosting Library
  ☆16Updated 7 months ago
• pwndizzle / com-research
  Research into COM
  ☆19Updated 5 years ago
• skelsec / winacl
  Platform independent library for interfacing windows security descriptors
  ☆17Updated 4 months ago
• randomaccess3 / block-parser
  Parser for Windows PowerShell script block logs
  ☆13Updated 4 months ago
• tyranid / setsidmapping
  Simple tool to use LsaManageSidNameMapping get LSA to add or remove SID to name mappings.
  ☆23Updated 4 years ago
• commial / LiveDiffAD
  AD Live changes viewer
  ☆35Updated 2 years ago
• idnahacks / NetCeasePlusPlus
  Takes the original idea of NetCease and adds functionality
  ☆24Updated 3 years ago
• jborean93 / LocalKdc
  Info on how to use Kerberos KDC on a non-domain joined host
  ☆45Updated 9 months ago
• rbmm / SearchEx
  D00
  ☆6Updated 3 years ago
• Tadas / PSNamedPipes
  Asynchronous named pipe module for PowerShell
  ☆21Updated 8 years ago
• RemiEscourrou / PowerShellMisc
  ☆35Updated 2 years ago
• gam4er / SneakyRun
  Some stuff for PHD2021
  ☆14Updated 3 years ago
• Scorpion-Security-Labs / OpenHashAPI
  OpenHashAPI provides a secure method of communicating hashes and enables lightweight workflows for security practitioners and enthusiasts…
  ☆14Updated 6 months ago
• 0xv1n / proc-suspend
  powershell script i wrote that can suspend an arbitrary process (with limits)
  ☆20Updated 2 years ago
• WildByDesign / win32-appcontainer-tools
  AppContainer tools for launching sandboxed win32 apps, changing ACL permissions and learning from ETW traces.
  ☆20Updated last week
• MzHmO / PPLDescribe
  Tool for obtaining information about PPL processes
  ☆17Updated last year