luctalpe / WMIMonLinks
Tool to monitor WMI activity on Windows
☆303Updated 5 years ago
Alternatives and similar repositories for WMIMon
Users that are interested in WMIMon are comparing it to the libraries listed below
Sorting:
- A PowerShell module to facilitate building, configuring, deploying, and auditing Windows Defender Application Control (WDAC) policies☆230Updated 3 years ago
- Microsoft Message Analyzer EOL Archive☆176Updated 6 years ago
- A collection of free miscellaneous Windows tools☆140Updated 5 months ago
- Module to provide PowerShell functions that abstract Win32 API functions☆249Updated last year
- Lnk file parser☆90Updated 7 months ago
- Windows Registry Knowledge Base☆191Updated 3 weeks ago
- Analysis and manipulation of extended attribute ($EA) on NTFS☆38Updated 10 years ago
- A PowerShell module to assist in parsing and managing catalog files.☆22Updated 9 years ago
- Full featured, offline Registry parser in C#☆242Updated 2 months ago
- Expand compressed files from WinSxS folder☆168Updated 6 months ago
- Commandline low level file extractor for NTFS☆304Updated 6 years ago
- Windows 10 (v1803+) ActivitiesCache.db parsers (SQLite, PowerShell, .EXE)☆194Updated 2 years ago
- Windows Prefetch parser. Supports all known versions from Windows XP to Windows 10.☆115Updated last year
- BCD is a module to interact with boot configuration data (BCD) either locally or remotely using the ROOT/WMI:Bcd* WMI classes. The functi…☆62Updated 5 years ago
- ☆23Updated 11 months ago
- Events from all manifest-based and mof-based ETW providers across Windows 10 versions☆326Updated last year
- Win 10/11 related research☆197Updated 2 years ago
- Configure Windows Defender ExploitGuard, Reset all ProcessMitigation, Import clean recommended Baseline Configuration☆41Updated 4 years ago
- AppCompatCache (shimcache) parser. Supports Windows 7 (x86 and x64), Windows 8.x, and Windows 10, and Windows 11☆127Updated last year
- Documentation and tools to access Windows Defender Application Control (WDAC) technology.☆250Updated last month
- ☆21Updated 11 months ago
- A collection of Windows software baseline notes with corresponding Windows Defender Application Control (WDAC) policies☆63Updated 2 years ago
- Module used for management of wireless profiles☆99Updated 11 months ago
- A set of tools to retrieve and parse TCG measured boot logs. Microsoft refers to these as Windows Boot Confirguration Logs (WBCL). In ord…☆69Updated 7 years ago
- Library to access the Windows Shell Item format☆73Updated 3 weeks ago
- Windows registry file format specification☆352Updated 7 years ago
- Tool to convert SDDL to readable text☆41Updated 7 years ago
- Easily define in-memory enums, structs, and Win32 functions in PowerShell☆227Updated 7 years ago
- Sysmon Tools for PowerShell☆231Updated 7 years ago
- Parser for $UsnJrnl on NTFS☆118Updated 3 years ago