mattifestation / MSFTTraceMessageFormat
All TMF files that I extracted from Microsoft PDBs.
☆12Updated 5 years ago
Related projects ⓘ
Alternatives and complementary repositories for MSFTTraceMessageFormat
- A PowerShell module to assist in parsing and managing catalog files.☆20Updated 7 years ago
- windows-operating-system-archaeology @Enigma0x3 @subTee☆44Updated 7 years ago
- A PowerShell binding for the Unicorn Engine☆16Updated 8 years ago
- radare2 script to help on COM objects reverse engineering☆11Updated 7 years ago
- ☆16Updated 2 years ago
- Event metadata collected across all manifest-based ETW providers on Window 10 1903☆30Updated 4 years ago
- A PowerShell script to prevent Sysmon from writing its events☆14Updated 4 years ago
- Emu-strings project - JScript/VBScript automated dropper analysis system☆17Updated 3 years ago
- Loads the AutoIt DLL and PowerShell assemblies into memory and executes the specified keystrokes☆60Updated 7 years ago
- module for certexfil☆15Updated 2 years ago
- A Microsoft Windows service to provide telemetry on Windows executable memory page changes to facilitate threat detection☆28Updated 4 years ago
- Scans through registry hives outputting entropy values for key/values, dumps binary contents to files...we are looking for those "fileles…☆11Updated 5 years ago
- Set of ultra technical notes about AD☆18Updated 6 years ago
- ☆26Updated 6 years ago
- ☆16Updated 7 years ago
- Privilege Escilation training project, with an emphasis on the distinction between vulnerability research & it's exposure and exploitatio…☆35Updated 7 years ago
- The hidden mstsc recorder player☆28Updated 4 years ago
- ☆48Updated 4 years ago
- History and analysis of Windows desktop images☆14Updated 3 years ago
- Programmatically access a TLS certificate chain in C++ and C#☆13Updated 6 years ago
- A Windows REG file to enable all default PowerShell logging on a system with PowerShell v5 installed☆16Updated 8 years ago
- Extract the password of the current user from flow (keylogger, config file, ..) Use SSPI to get a valid NTLM challenge/response and test …☆57Updated 5 years ago
- ☆16Updated 6 years ago
- A simple shellcode runner☆20Updated 10 years ago
- A tool for scanning registery key permissions. Find where non-admins can create symbolic links.☆46Updated 5 years ago
- ☆62Updated 8 years ago
- Run Managed Assemblies with RunDll☆16Updated 6 years ago