luctalpe / WMIMonLinks
Tool to monitor WMI activity on Windows
☆295Updated 5 years ago
Alternatives and similar repositories for WMIMon
Users that are interested in WMIMon are comparing it to the libraries listed below
Sorting:
- A collection of free miscellaneous Windows tools☆138Updated 2 months ago
- A PowerShell module to facilitate building, configuring, deploying, and auditing Windows Defender Application Control (WDAC) policies☆227Updated 3 years ago
- Microsoft Message Analyzer EOL Archive☆169Updated 5 years ago
- Windows Registry Knowledge Base☆186Updated this week
- Module to provide PowerShell functions that abstract Win32 API functions☆249Updated last year
- Expand compressed files from WinSxS folder☆163Updated 3 months ago
- Commandline low level file extractor for NTFS☆303Updated 6 years ago
- A PowerShell module to assist in parsing and managing catalog files.☆22Updated 8 years ago
- Analysis and manipulation of extended attribute ($EA) on NTFS☆38Updated 10 years ago
- Events from all manifest-based and mof-based ETW providers across Windows 10 versions☆311Updated last year
- Lnk file parser☆90Updated 4 months ago
- Documentation and tools to access Windows Defender Application Control (WDAC) technology.☆243Updated last month
- Windows registry file format specification☆347Updated 6 years ago
- Windows 10 (v1803+) ActivitiesCache.db parsers (SQLite, PowerShell, .EXE)☆195Updated 2 years ago
- 🚀AutoRuns is a PowerShell module that will help do live incident response and enumerate autoruns artifacts that may be used by legitima…☆281Updated 9 months ago
- Easily define in-memory enums, structs, and Win32 functions in PowerShell☆225Updated 7 years ago
- A set of tools to retrieve and parse TCG measured boot logs. Microsoft refers to these as Windows Boot Confirguration Logs (WBCL). In ord…☆66Updated 7 years ago
- Library to access the Windows Shell Item format☆74Updated last year
- Windows Prefetch parser. Supports all known versions from Windows XP to Windows 10.☆114Updated 9 months ago
- A GUI version of the classic PoolMon tool☆118Updated 7 years ago
- Sysmon Tools for PowerShell☆231Updated 7 years ago
- Tool to convert SDDL to readable text☆40Updated 7 years ago
- BCD is a module to interact with boot configuration data (BCD) either locally or remotely using the ROOT/WMI:Bcd* WMI classes. The functi…☆61Updated 5 years ago
- Full featured, offline Registry parser in C#☆234Updated last month
- AppCompatCache (shimcache) parser. Supports Windows 7 (x86 and x64), Windows 8.x, and Windows 10☆123Updated 9 months ago
- Configure Windows Defender ExploitGuard, Reset all ProcessMitigation, Import clean recommended Baseline Configuration☆41Updated 4 years ago
- Win 10/11 related research☆192Updated last year
- View ETW Provider manifest☆537Updated 11 months ago
- ☆23Updated 9 months ago
- A collection of Windows software baseline notes with corresponding Windows Defender Application Control (WDAC) policies☆62Updated last year