A set of tools to retrieve and parse TCG measured boot logs. Microsoft refers to these as Windows Boot Confirguration Logs (WBCL). In order to retrieve these logs, you must be running at least Windows 8 with the TPM enabled.
☆78Jun 17, 2018Updated 8 years ago
Alternatives and similar repositories for TCGLogTools
Users that are interested in TCGLogTools are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A PowerShell module to assist in parsing and managing catalog files.☆22Jan 12, 2017Updated 9 years ago
- BCD is a module to interact with boot configuration data (BCD) either locally or remotely using the ROOT/WMI:Bcd* WMI classes. The functi…☆62Aug 16, 2020Updated 6 years ago
- A proof-of-concept subject interface package (SIP) used to demonstrate digital signature subversion attacks.☆100Jan 7, 2018Updated 8 years ago
- All TMF files that I extracted from Microsoft PDBs.☆14Jun 29, 2019Updated 7 years ago
- Fix acquired .evt - Windows Event Log files (Forensics)☆18Mar 29, 2016Updated 10 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Sysmon configuration☆64Jul 12, 2018Updated 8 years ago
- Defender for Endpoint☆28Mar 28, 2026Updated 6 months ago
- Windows SSPI wrapper in prue python☆15Nov 29, 2023Updated 2 years ago
- Take back control of Windows Code Integrity, no exploits or patching required! Requires that you control your own Platform Key (PK).☆55Aug 22, 2022Updated 4 years ago
- Sysmon Tools for PowerShell☆233Aug 17, 2018Updated 8 years ago
- A reference Device Guard code integrity policy consisting of FilePublisher deny rules for published Device Guard configuration bypasses☆116May 27, 2017Updated 9 years ago
- A PowerShell binding for the Unicorn Engine☆17Dec 27, 2015Updated 10 years ago
- Autotuner Windows 10 for awesome perfomance setting, privacy and security.☆12Dec 4, 2018Updated 7 years ago
- Invoke CyberArk PARClient.exe Utility with PowerShell☆12Feb 12, 2020Updated 6 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Splunk app for Threat hunting☆15Nov 15, 2018Updated 7 years ago
- A Compiler from Sigma rules to VQL☆20May 18, 2026Updated 4 months ago
- Cross platform PowerShell implementation of Authenticode signing and verification☆46May 1, 2026Updated 5 months ago
- All materials from our Black Hat 2018 "Subverting Sysmon" talk☆133Aug 10, 2018Updated 8 years ago
- A collection of Terraform and Ansible scripts that automatically (and quickly) deploys a small Velociraptor R&D lab.☆23Apr 16, 2021Updated 5 years ago
- SoulExtraction is a windows driver library for extracting cert information in windows drivers☆24Feb 12, 2023Updated 3 years ago
- A command-line tool for parsing Windows Master File Table ($MFT) and importing the results into Elasticsearch.☆12Oct 2, 2026Updated last week
- Uses WMI Event Win32_ModuleLoadTrace to monitor module loading. Provides filters, and detailed data. Has an option to monitor for CLR Inj…☆42May 9, 2019Updated 7 years ago
- Placeholder for my detection repo and misc detection engineering content☆44Oct 20, 2023Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A simple shellcode runner☆23Apr 20, 2014Updated 12 years ago
- ☆17Apr 16, 2023Updated 3 years ago
- Containerized IDA Pro (Windows/Wine), DEPRECIATED, please use https://github.com/NyaMisty/docker-wine-ida☆27Nov 23, 2017Updated 8 years ago
- Various tools and scripts☆43Nov 30, 2022Updated 3 years ago
- A library implementing a generic SQL like query language.☆22Aug 20, 2026Updated last month
- Data exfiltration using reflective DNS resolution covert channel☆53Jan 10, 2018Updated 8 years ago
- MSIX App Attach repo☆25Sep 28, 2026Updated last week
- Just Another broken Registry Parser (JARP)☆16May 23, 2024Updated 2 years ago
- PowerShell module to interact with api.spacexdata.com☆28Dec 10, 2019Updated 6 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- PowerShell Tools for CyberArk☆19Dec 13, 2019Updated 6 years ago
- OVF module to test the basic operation of an Active Directory domain controller using Pester tests☆23Aug 15, 2016Updated 10 years ago
- A ~$20.00 tool for logging data/testing devices with a Wiegand Interface. Can be used to create a portable RFID reader or installed direc…☆10Mar 25, 2018Updated 8 years ago
- ShellSweeping the evil.☆53Jun 18, 2024Updated 2 years ago
- A collection of my yara rules☆34Jul 11, 2023Updated 3 years ago
- An Incident Response tool that visualizes historic process execution evidence (based on Event ID 4688 - Process Creation Event) in a tree…☆60Jan 30, 2018Updated 8 years ago
- Telegram-based PowerShell Runspace Host☆11Dec 8, 2022Updated 3 years ago