A set of tools to retrieve and parse TCG measured boot logs. Microsoft refers to these as Windows Boot Confirguration Logs (WBCL). In order to retrieve these logs, you must be running at least Windows 8 with the TPM enabled.
☆72Jun 17, 2018Updated 8 years ago
Alternatives and similar repositories for TCGLogTools
Users that are interested in TCGLogTools are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A PowerShell module to assist in parsing and managing catalog files.☆22Jan 12, 2017Updated 9 years ago
- BCD is a module to interact with boot configuration data (BCD) either locally or remotely using the ROOT/WMI:Bcd* WMI classes. The functi…☆63Aug 16, 2020Updated 5 years ago
- All TMF files that I extracted from Microsoft PDBs.☆14Jun 29, 2019Updated 7 years ago
- Fix acquired .evt - Windows Event Log files (Forensics)☆18Mar 29, 2016Updated 10 years ago
- Sysmon configuration☆64Jul 12, 2018Updated 8 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Defender for Endpoint☆28Mar 28, 2026Updated 3 months ago
- Windows SSPI wrapper in prue python☆15Nov 29, 2023Updated 2 years ago
- Take back control of Windows Code Integrity, no exploits or patching required! Requires that you control your own Platform Key (PK).☆54Aug 22, 2022Updated 3 years ago
- Sysmon Tools for PowerShell☆233Aug 17, 2018Updated 7 years ago
- A reference Device Guard code integrity policy consisting of FilePublisher deny rules for published Device Guard configuration bypasses☆116May 27, 2017Updated 9 years ago
- A PowerShell binding for the Unicorn Engine☆17Dec 27, 2015Updated 10 years ago
- A simple python script to check evil Visual Studio projects☆21Oct 13, 2023Updated 2 years ago
- Invoke CyberArk PARClient.exe Utility with PowerShell☆12Feb 12, 2020Updated 6 years ago
- Splunk app for Threat hunting☆15Nov 15, 2018Updated 7 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A Compiler from Sigma rules to VQL☆19May 18, 2026Updated 2 months ago
- Cross platform PowerShell implementation of Authenticode signing and verification☆42May 1, 2026Updated 2 months ago
- All materials from our Black Hat 2018 "Subverting Sysmon" talk☆135Aug 10, 2018Updated 7 years ago
- A collection of Terraform and Ansible scripts that automatically (and quickly) deploys a small Velociraptor R&D lab.☆22Apr 16, 2021Updated 5 years ago
- SoulExtraction is a windows driver library for extracting cert information in windows drivers☆24Feb 12, 2023Updated 3 years ago
- A command-line tool for parsing Windows Master File Table ($MFT) and importing the results into Elasticsearch.☆12Jun 3, 2026Updated last month
- Uses WMI Event Win32_ModuleLoadTrace to monitor module loading. Provides filters, and detailed data. Has an option to monitor for CLR Inj…☆42May 9, 2019Updated 7 years ago
- Placeholder for my detection repo and misc detection engineering content☆43Oct 20, 2023Updated 2 years ago
- NVMe-oF for Windows.☆15Feb 4, 2023Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A simple shellcode runner☆23Apr 20, 2014Updated 12 years ago
- Materials from my Circle City Con talk: Fantastic OSINT (and where to find it)☆23Jul 1, 2016Updated 10 years ago
- ☆17Apr 16, 2023Updated 3 years ago
- Containerized IDA Pro (Windows/Wine), DEPRECIATED, please use https://github.com/NyaMisty/docker-wine-ida☆26Nov 23, 2017Updated 8 years ago
- Various tools and scripts☆43Nov 30, 2022Updated 3 years ago
- A library implementing a generic SQL like query language.☆22Jun 4, 2026Updated last month
- MSIX App Attach repo☆25Sep 16, 2025Updated 10 months ago
- Data exfiltration using reflective DNS resolution covert channel☆53Jan 10, 2018Updated 8 years ago
- Just Another broken Registry Parser (JARP)☆16May 23, 2024Updated 2 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Using MMIO (Memory-Mapped I/O) to read TPM 2.0 public Endorsement Key.☆55May 29, 2024Updated 2 years ago
- Session hijacking GUI tool☆15Oct 20, 2013Updated 12 years ago
- PowerShell module to interact with api.spacexdata.com☆28Dec 10, 2019Updated 6 years ago
- PowerShell Tools for CyberArk☆19Dec 13, 2019Updated 6 years ago
- OVF module to test the basic operation of an Active Directory domain controller using Pester tests☆23Aug 15, 2016Updated 9 years ago
- A ~$20.00 tool for logging data/testing devices with a Wiegand Interface. Can be used to create a portable RFID reader or installed direc…☆10Mar 25, 2018Updated 8 years ago
- ShellSweeping the evil.☆53Jun 18, 2024Updated 2 years ago