This is a repository that is meant to hold detections for various process injection techniques.
☆34Mar 3, 2020Updated 6 years ago
Alternatives and similar repositories for Detecting-Process-Injection-Techniques
Users that are interested in Detecting-Process-Injection-Techniques are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆16Dec 16, 2020Updated 5 years ago
- A repository that maps API calls to Sysmon Event ID's.☆122Nov 14, 2022Updated 3 years ago
- Windows capability development using GCC and GNU Make☆23Nov 1, 2025Updated 11 months ago
- Sentinel Guard - Use to build up Honeypot and Honeynet with ZERO cost easily and simply.☆18Jul 25, 2021Updated 5 years ago
- Compilation of resources to help with Adversary Simulation automation harness☆99Aug 7, 2020Updated 6 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- OSSEM Common Data Model☆56Sep 20, 2022Updated 4 years ago
- ☆48Mar 19, 2020Updated 6 years ago
- Simple PoC to locate hooked functions by EDR in ntdll.dll☆45Jul 16, 2023Updated 3 years ago
- Proof of Concept of TrustZone exploit☆16Aug 10, 2025Updated last year
- Epimitheus is a tool that uses graphical database Neo4j for Windows Events visualization.☆19Mar 13, 2022Updated 4 years ago
- A Splunk Technology Add-on to forward filtered ETW events.☆31Oct 14, 2020Updated 5 years ago
- An example code of CiGetCertPublisherName☆15Mar 24, 2022Updated 4 years ago
- ☆53Oct 27, 2018Updated 7 years ago
- Simple EDR that injects a DLL into a process to place a hook on specific Windows API☆99Aug 27, 2023Updated 3 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- ☆24Mar 19, 2020Updated 6 years ago
- Dump of organized knowledge on DFIR☆138Oct 4, 2021Updated 5 years ago
- API Hammering with C++20☆52Jul 21, 2022Updated 4 years ago
- ☆20Oct 23, 2020Updated 5 years ago
- Automatic detection engineering technical state compliance☆55Jul 7, 2024Updated 2 years ago
- QRadar Export the rule set for printing☆23Oct 23, 2017Updated 8 years ago
- Anomaly detection in time-series networks. Spatio-temporal Anomaly Detection☆10Jan 9, 2020Updated 6 years ago
- Pushes Sysmon Configs☆91Jun 11, 2021Updated 5 years ago
- Specialized tool to dump Position Independent Code.☆22Aug 4, 2020Updated 6 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Process Creation, Image Load and Thread Creation Notification☆12Sep 15, 2023Updated 3 years ago
- ☆10Jul 5, 2020Updated 6 years ago
- Crystal Anti-Exploit Protection 2012☆36May 31, 2020Updated 6 years ago
- Executes shellcode from a remote server and aims to evade in-memory scanners☆31Nov 17, 2019Updated 6 years ago
- 一个基于openresty开发的安全网关demo☆30Mar 3, 2022Updated 4 years ago
- FIles and guides related to using Elasticstack as a SIEM☆12May 16, 2020Updated 6 years ago
- ☆37May 9, 2019Updated 7 years ago
- Documentation and supporting script sample for Windows Exploit Guard☆167Oct 2, 2026Updated last week
- Python tool for kidnapping Chrome cookies from a MacOS target☆22Oct 5, 2022Updated 4 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- A collection of useful PowerShell tools to collect, organize, and visualize Sysmon event data☆38Mar 23, 2020Updated 6 years ago
- A windows 11 rootkit in Rust☆20Mar 23, 2025Updated last year
- Queries a McAfee ESM for inactive data sources.☆10Dec 16, 2019Updated 6 years ago
- subTee gists code backups☆36Dec 19, 2017Updated 8 years ago
- Mentally ill EtwTi parser☆73Jan 11, 2026Updated 9 months ago
- ☆114Jan 31, 2024Updated 2 years ago
- Combining Sealighter with unpatched exploits to run the Threat-Intelligence ETW Provider☆211Dec 6, 2022Updated 3 years ago