Alternatives and similar repositories for PSDetour-Hooks:

Users that are interested in PSDetour-Hooks are comparing it to the libraries listed below

• zodiacon / TaskSched
  ☆27Updated 2 years ago
• SadProcessor / EzETW
  Cmdlets for capturing Windows Events
  ☆14Updated 3 years ago
• jborean93 / PSDetour
  Windows Detour Hooking in PowerShell
  ☆78Updated 9 months ago
• DebugPrivilege / WindowsAP1
  Code samples that serve as references for Windows API functions
  ☆30Updated 9 months ago
• gpoguy / setpol
  Lets you write arbitrary registry entries to Group Policy related .pol files (e.g. registry.pol)
  ☆11Updated 5 years ago
• s4dbrd / ETWReader
  Read ETW Provider events. Inspired by ETWExplorer by Pavel Yosifovich
  ☆14Updated 8 months ago
• rbmm / SearchEx
  D00
  ☆6Updated 3 years ago
• rbmm / PPL
  run process as PPL Antimalware
  ☆10Updated last year
• decoder-it / CreateTokenExample
  ☆17Updated 5 years ago
• pwndizzle / com-research
  Research into COM
  ☆19Updated 5 years ago
• jsecurity101 / MSFT_DriverBlockList
  Repository of Microsoft Driver Block Lists based off of OS-builds
  ☆39Updated 11 months ago
• nickvangilder / To-Safe-Mode-And-Beyond
  A tool for leveraging elevated acess over a computer to boot the computer into Windows Safe Mode, alter settings, and then boot back into…
  ☆16Updated 3 years ago
• Fleex255 / CustomShim
  Example/starter code for custom Windows application compatibility shims
  ☆33Updated 4 years ago
• tyranid / setsidmapping
  Simple tool to use LsaManageSidNameMapping get LSA to add or remove SID to name mappings.
  ☆23Updated 4 years ago
• jborean93 / LocalKdc
  Info on how to use Kerberos KDC on a non-domain joined host
  ☆43Updated 7 months ago
• commial / LiveDiffAD
  AD Live changes viewer
  ☆35Updated 2 years ago
• randomaccess3 / block-parser
  Parser for Windows PowerShell script block logs
  ☆13Updated 2 months ago
• Devolutions / pwsh-host-rs
  Rust PowerShell Hosting Library
  ☆16Updated 6 months ago
• skelsec / aiowinreg
  Registry hive parsing the async way
  ☆21Updated last week
• idnahacks / NetCeasePlusPlus
  Takes the original idea of NetCease and adds functionality
  ☆24Updated 3 years ago
• jborean93 / PSEtw
  PowerShell ETW consumer module
  ☆28Updated last year
• Tadas / PSNamedPipes
  Asynchronous named pipe module for PowerShell
  ☆20Updated 8 years ago
• MSAdministrator / PSRegistry
  A PowerShell module that uses the WIN_API to access the registry
  ☆14Updated 7 years ago
• skelsec / winacl
  Platform independent library for interfacing windows security descriptors
  ☆16Updated 2 months ago
• rbmm / Services
  ☆18Updated 2 months ago
• xforcered / AdvSim.Cryptography
  Simple and sane cryptographic wrapper library.
  ☆27Updated last year
• WildByDesign / win32-appcontainer-tools
  AppContainer tools for launching sandboxed win32 apps, changing ACL permissions and learning from ETW traces.
  ☆19Updated last month
• rbmm / Noname
  really ?
  ☆12Updated last year
• lem0nSec / Alcatraz
  An example of Windows self-replicating malware.
  ☆10Updated 2 years ago
• rweijnen / Posh-Snippets
  PowerShell snippets
  ☆15Updated 4 months ago