mattifestation / CatalogTools
A PowerShell module to assist in parsing and managing catalog files.
☆19Updated 7 years ago
Related projects: ⓘ
- All TMF files that I extracted from Microsoft PDBs.☆12Updated 5 years ago
- ☆21Updated this week
- Event metadata collected across all manifest-based ETW providers on Window 10 1903☆30Updated 4 years ago
- PowerShell Module for the Antimalware Scan Interface (AMSI)☆25Updated 7 years ago
- ☆21Updated 8 years ago
- A Windows REG file to enable all default PowerShell logging on a system with PowerShell v5 installed☆16Updated 8 years ago
- A PowerShell binding for the Unicorn Engine☆17Updated 8 years ago
- Basic demo for Hidden Treasure talk.☆49Updated 6 years ago
- Trace ScriptBlock execution for powershell v2☆39Updated 4 years ago
- PowerShellMethodAuditor listens to the PowerShell ETW provider and logs PowerShell method invocations.☆37Updated 7 years ago
- PowerKrabsEtw is a PowerShell interface for doing real-time ETW tracing.☆103Updated 3 years ago
- ☆51Updated 6 years ago
- A Microsoft Windows service to provide telemetry on Windows executable memory page changes to facilitate threat detection☆28Updated 3 years ago
- Loads the AutoIt DLL and PowerShell assemblies into memory and executes the specified keystrokes☆60Updated 7 years ago
- windows-operating-system-archaeology @Enigma0x3 @subTee☆44Updated 7 years ago
- Emu-strings project - JScript/VBScript automated dropper analysis system☆17Updated 3 years ago
- Run multiple PowerShell scripts concurrently in different app domains!☆33Updated 8 years ago
- Decode security descriptors in $Secure on NTFS☆20Updated 2 years ago
- Domain Controller GPOs☆20Updated 7 years ago
- Script to parse Process Monitor XML log file, and give you a summary report.☆23Updated 8 years ago
- ☆63Updated this week
- Set of ultra technical notes about AD☆18Updated 6 years ago
- Extract GUIDs from .NET assemblies☆21Updated 8 years ago
- Set of utilities for getting information about Windows Events☆15Updated 6 years ago
- Parse Microsoft shim databases☆28Updated 2 weeks ago
- Custom scripts released for BSidesDC 2016☆14Updated 7 years ago
- A PowerShell module to abstract the complexities of Permanent WMI Event Subscriptions☆54Updated 8 years ago
- DotNext 2019 St. Petersburg Talk Demos☆36Updated 5 years ago
- A fork of David B Heise's VirusTotal Powershell Module☆17Updated 2 years ago
- ☆47Updated 4 years ago