jsecurity101 / PowerParse
PowerShell PE Parser
☆62Updated 8 months ago
Alternatives and similar repositories for PowerParse:
Users that are interested in PowerParse are comparing it to the libraries listed below
- a tiny program to consume from ETW providers for research☆46Updated 2 months ago
- This repository is meant to catalog network and host artifacts associated with various EDR products "shell" and response functionalities.☆76Updated 6 months ago
- A practical resource on using open-source tools for Incident Response. This repo shares workflows, tool setups, and steps for responding …☆28Updated 4 months ago
- A collection of small scripts and tools for deobfuscation and malware analysis.☆66Updated last year
- ☆103Updated 4 months ago
- quASAR: ASAR manipulation made easy☆31Updated 2 years ago
- Yara Rules for Modern Malware☆73Updated last year
- ☆155Updated 10 months ago
- ☆69Updated last year
- Live memory analysis detecting malware IOCs in processes, modules, handles, tokens, threads, .NET assemblies, memory address space and en…☆39Updated 6 months ago
- Hollowise is a tool that implements process hollowing and PPID (Parent Process ID) spoofing techniques for masking a legitimate analysis …☆26Updated last month
- ☆45Updated last year
- ☆20Updated last year
- ☆27Updated last year
- Scan your computer for known vulnerable and known malicious Windows drivers using loldrivers.io☆82Updated last year
- ☆22Updated last month
- ☆46Updated last year
- ☆14Updated 10 months ago
- ☆97Updated 4 months ago
- ☆71Updated 7 months ago
- Analyse MSI files for vulnerabilities☆127Updated 6 months ago
- Scan files for potential threats while leveraging AMSI (Antimalware Scan Interface) and Windows Defender. By isolating malicious content.☆14Updated 2 months ago
- ☆80Updated 4 months ago
- Just another ntdll unhooking using Parun's Fart technique☆74Updated 2 years ago
- Work in progress experiments with reverse shells, AV bypass and extraction of secrets from memory in C☆39Updated 5 years ago
- Invoke-AtomicAssessment is a powerful tool designed to facilitate adversary emulation by leveraging Atomic Red Team.☆36Updated 2 months ago
- A collection of tools, scripts and personal research☆127Updated 8 months ago
- ☆40Updated last year
- ☆25Updated 3 months ago
- Dumping LSASS by Unhooking MiniDumpWriteDump by getting a fresh DbgHelp.dll copy from the disk , plus functions and strings obfuscation☆30Updated 2 years ago