Alternatives and similar repositories for evtq

Users that are interested in evtq are comparing it to the libraries listed below

• jonny-jhnson / LDAPMon
  ☆46Updated 2 years ago
• matterpreter / FindETWProviderImage
  Quickly search for references to a GUID in DLLs, EXEs, and drivers
  ☆75Updated 4 years ago
• Immersive-Labs-Sec / BruteRatel-DetectionTools
  A collection of Tools and Rules for decoding Brute Ratel C4 badgers
  ☆66Updated 3 years ago
• eladshamir / BadWindowsService
  An insecurely implemented and installed Windows service for emulating elevation of privileges vulnerabilities
  ☆63Updated 3 years ago
• citronneur / kerlab
  Kerberos laboratory to better understand and then detecting attack on kerberos
  ☆70Updated 4 years ago
• skelsec / aardwolfgui
  Asynchronous RDP/VNC client for Python (GUI)
  ☆75Updated last year
• netwrix / server-untrust-account
  A technique for Active Directory domain persistence
  ☆39Updated 2 years ago
• mattifestation / AntimalwareBlight
  Execute PowerShell code at the antimalware-light protection level.
  ☆142Updated 3 years ago
• RemiEscourrou / PowerShellMisc
  ☆35Updated 3 years ago
• codewhitesec / SysmonEnte
  ☆78Updated 3 years ago
• postrequest / donut-rs
  Donut generator in rust.
  ☆28Updated 3 years ago
• MythicC2Profiles / http
  Simple HTTP async comms using standard GET/POST requests
  ☆46Updated 3 months ago
• 3gstudent / ntfsDump
  Use to copy a file from an NTFS partitioned volume by reading the raw volume and parsing the NTFS structures.
  ☆119Updated 4 years ago
• Teach2Breach / Red_Team_Rust
  Collection of Rust repos useful for Red Teamers.
  ☆34Updated 3 years ago
• riesha / drv-vuln-scanner
  Finds imports that could be exploited, still requires manual analysis.
  ☆29Updated 3 years ago
• xpn / WAMBam
  Tooling related to the WAM Bam - Recovering Web Tokens From Office blog post
  ☆129Updated 3 years ago
• djhohnstein / HookDetector
  Playing with PE's and Building Structures by Hand
  ☆22Updated 3 years ago
• deepinstinct / AMSI-Unchained
  Unchain AMSI by patching the provider’s unmonitored memory space
  ☆91Updated 3 years ago
• thalpius / Microsoft-Defender-for-Identity-Encrypted-Password
  ☆36Updated last year
• whokilleddb / exe_who
  Executables on Disk? Bleh 🤮
  ☆111Updated 2 years ago
• ustayready / roguerdp
  ☆33Updated 3 years ago
• wietze / windows-dll-env-hijacking
  Project for identifying executables and DLLs vulnerable to environment-variable based DLL hijacking.
  ☆62Updated 3 years ago
• netbiosX / GhostLoader
  GhostLoader - AppDomainManager - Injection - 攻壳机动队
  ☆53Updated 5 years ago
• skelsec / pypykatz-volatility3
  pypykatz plugin for volatility3 framework
  ☆46Updated 8 months ago
• SafeBreach-Labs / aikido_wiper
  ☆68Updated 3 years ago
• secur30nly / rust-herpaderping
  Rust implementation of the Process Herpaderping
  ☆25Updated 2 years ago
• olafhartong / PockETWatcher
  a tiny program to consume from ETW providers for research
  ☆53Updated last year
• DidierStevens / AdHoc
  AdHoc solutions
  ☆48Updated 2 years ago
• goichot / CVE-2020-3433
  PoCs and technical analysis of three vulnerabilities found on Cisco AnyConnect for Windows: CVE-2020-3433, CVE-2020-3434 and CVE-2020-343…
  ☆43Updated 5 years ago
• mgeeky / msi-shenanigans
  Proof of Concept code and samples presenting emerging threat of MSI installer files.
  ☆90Updated 3 years ago