This is a repository that is meant to hold detections for various process injection techniques.
☆34Mar 3, 2020Updated 6 years ago
Alternatives and similar repositories for Detecting-Process-Injection-Techniques
Users that are interested in Detecting-Process-Injection-Techniques are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆16Dec 16, 2020Updated 5 years ago
- A repository that maps API calls to Sysmon Event ID's.☆122Nov 14, 2022Updated 3 years ago
- Windows capability development using GCC and GNU Make☆23Nov 1, 2025Updated last year
- ☆11Mar 15, 2026Updated 7 months ago
- ☆13Feb 25, 2021Updated 5 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Compilation of resources to help with Adversary Simulation automation harness☆99Aug 7, 2020Updated 6 years ago
- Script for parsing Symantec Endpoint Protection logs, VBNs, and ccSubSDK database.☆65Dec 21, 2022Updated 3 years ago
- Sentinel Guard - Use to build up Honeypot and Honeynet with ZERO cost easily and simply.☆18Jul 25, 2021Updated 5 years ago
- Links to malware-related YARA rules☆15Sep 29, 2022Updated 4 years ago
- Read Windows message table entries.☆11Feb 5, 2023Updated 3 years ago
- A windows 11 rootkit in Rust☆22Mar 23, 2025Updated last year
- Detect leaks in security event logs.☆19Apr 9, 2019Updated 7 years ago
- Watches the Downloads folder for any new files and inserts it into Nemesis for analysis.☆15Feb 29, 2024Updated 2 years ago
- Simple EDR that injects a DLL into a process to place a hook on specific Windows API☆99Aug 27, 2023Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆48Mar 19, 2020Updated 6 years ago
- Collection of self-made Red Team tools that have come in handy☆12Aug 25, 2024Updated 2 years ago
- Automatic detection engineering technical state compliance☆55Jul 7, 2024Updated 2 years ago
- subTee gists code backups☆37Dec 19, 2017Updated 8 years ago
- OSSEM Common Data Model☆56Sep 20, 2022Updated 4 years ago
- Epimitheus is a tool that uses graphical database Neo4j for Windows Events visualization.☆19Mar 13, 2022Updated 4 years ago
- ☆13Mar 31, 2026Updated 7 months ago
- Proof of Concept of TrustZone exploit☆16Aug 10, 2025Updated last year
- A simple BOF that disables some logging with NtSetInformationProcess☆14Oct 13, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- An example code of CiGetCertPublisherName☆15Mar 24, 2022Updated 4 years ago
- Carbon Black Response IR tool☆56Dec 10, 2020Updated 5 years ago
- A Splunk Technology Add-on to forward filtered ETW events.☆31Oct 14, 2020Updated 6 years ago
- Dump of organized knowledge on DFIR☆138Oct 4, 2021Updated 5 years ago
- ☆14Jun 21, 2020Updated 6 years ago
- Powershell / C# based cross platform forensic framework based for live incident response☆23Jul 5, 2020Updated 6 years ago
- Pinjectra is a C/C++ OOP-like library that implements Process Injection techniques (with focus on Windows 10 64-bit)☆16Sep 4, 2020Updated 6 years ago
- Automated pipeline for generating forensic timelines from Magnet Response collections.☆15Nov 6, 2025Updated 11 months ago
- Pushes Sysmon Configs☆91Jun 11, 2021Updated 5 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- SysmonX - An Augmented Drop-In Replacement of Sysmon☆222Sep 17, 2019Updated 7 years ago
- ☆24Mar 19, 2020Updated 6 years ago
- ☆53Oct 27, 2018Updated 8 years ago
- EQGRP: Replicating DarkPulsar, an DLL capable of hooking Security Package Method Tables on the Heap!☆15Oct 11, 2020Updated 6 years ago
- A python script developed to process Windows memory images based on triage type.☆268Nov 25, 2023Updated 2 years ago
- Detects Module Stomping as implemented by Cobalt Strike☆17Dec 13, 2020Updated 5 years ago
- ☆77Aug 2, 2023Updated 3 years ago