Alternatives and similar repositories for PSDetour-Hooks:

Users that are interested in PSDetour-Hooks are comparing it to the libraries listed below

• zodiacon / TaskSched
  ☆27Updated 2 years ago
• DebugPrivilege / WindowsAP1
  Code samples that serve as references for Windows API functions
  ☆16Updated 7 months ago
• SadProcessor / EzETW
  Cmdlets for capturing Windows Events
  ☆13Updated 2 years ago
• jborean93 / PSDetour
  Windows Detour Hooking in PowerShell
  ☆77Updated 7 months ago
• decoder-it / CreateTokenExample
  ☆16Updated 5 years ago
• s4dbrd / ETWReader
  Read ETW Provider events. Inspired by ETWExplorer by Pavel Yosifovich
  ☆14Updated 6 months ago
• Devolutions / pwsh-host-rs
  Rust PowerShell Hosting Library
  ☆16Updated 4 months ago
• pwndizzle / com-research
  Research into COM
  ☆19Updated 4 years ago
• rbmm / PPL
  run process as PPL Antimalware
  ☆11Updated last year
• gpoguy / setpol
  Lets you write arbitrary registry entries to Group Policy related .pol files (e.g. registry.pol)
  ☆11Updated 5 years ago
• jborean93 / LocalKdc
  Info on how to use Kerberos KDC on a non-domain joined host
  ☆39Updated 5 months ago
• Fleex255 / CustomShim
  Example/starter code for custom Windows application compatibility shims
  ☆32Updated 4 years ago
• rbmm / SearchEx
  D00
  ☆6Updated 3 years ago
• Tadas / PSNamedPipes
  Asynchronous named pipe module for PowerShell
  ☆20Updated 8 years ago
• jsecurity101 / MSFT_DriverBlockList
  Repository of Microsoft Driver Block Lists based off of OS-builds
  ☆39Updated 9 months ago
• RemiEscourrou / PowerShellMisc
  ☆35Updated 2 years ago
• commial / LiveDiffAD
  AD Live changes viewer
  ☆35Updated last year
• rweijnen / Posh-Snippets
  PowerShell snippets
  ☆15Updated 2 months ago
• xforcered / AdvSim.Cryptography
  Simple and sane cryptographic wrapper library.
  ☆26Updated last year
• randomaccess3 / block-parser
  Parser for Windows PowerShell script block logs
  ☆13Updated 2 weeks ago
• WildByDesign / win32-appcontainer-tools
  AppContainer tools for launching sandboxed win32 apps, changing ACL permissions and learning from ETW traces.
  ☆13Updated this week
• rbmm / Noname
  really ?
  ☆12Updated 10 months ago
• idnahacks / NetCeasePlusPlus
  Takes the original idea of NetCease and adds functionality
  ☆24Updated 2 years ago
• skelsec / winacl
  Platform independent library for interfacing windows security descriptors
  ☆16Updated 2 weeks ago
• tyranid / setsidmapping
  Simple tool to use LsaManageSidNameMapping get LSA to add or remove SID to name mappings.
  ☆23Updated 4 years ago
• Teach2Breach / NtCreateUserProcess_rs
  example using NtCreateUserProcess in rust
  ☆17Updated last month
• klezVirus / DCKFinder
  Dangling COM Keys Finder
  ☆15Updated 3 years ago
• secana / CertDump
  Dump certificates from PE files in different formats
  ☆38Updated last year
• thalpius / Microsoft-Defender-for-Identity-Encrypted-Password
  ☆35Updated 7 months ago
• lem0nSec / Alcatraz
  An example of Windows self-replicating malware.
  ☆10Updated 2 years ago