nccgroup / UninstalledAppCanary
A Canary which fires when uninstalled
☆34Updated 3 years ago
Alternatives and similar repositories for UninstalledAppCanary:
Users that are interested in UninstalledAppCanary are comparing it to the libraries listed below
- A PowerShell script to prevent Sysmon from writing its events☆15Updated 4 years ago
- Apfell implant written in C#.☆8Updated 4 years ago
- This is a 64 bit VBA implementation of Christophe Tafani-Dereeper's original VBA code described in his blog @ https://blog.christophetd.f…☆20Updated 5 years ago
- SSDP Service Discovery☆16Updated 6 years ago
- Protect your servers with a secret header☆29Updated 4 years ago
- Log converter from CS log to Ghostwriter CSV☆29Updated 4 years ago
- Extracts Azure authentication tokens from PowerShell process minidumps.☆23Updated last year
- Reproducible and extensible BloodHound playbooks☆42Updated 5 years ago
- 3gsocks - a reverse connection socks5 based network pivot☆10Updated 3 years ago
- A tool to sync mythic events with ghostwriter oplog.☆12Updated 2 months ago
- reboot of https://github.com/Genetic-Malware/Ebowla in order to simplify / modernize the codebase and provide ongoing support☆22Updated 3 years ago
- Forked and updated with some additional features over the original☆16Updated 3 years ago
- A cross platform tool for verifying credentials and executing single commands☆32Updated 5 years ago
- Kibana app for RedELK☆16Updated last year
- Apply a filter to the events being reported by windows event logging☆15Updated 4 years ago
- various slides and presentations I've worked on☆18Updated 11 months ago
- ☆26Updated 6 years ago
- ☆14Updated 4 years ago
- Some simple scripts for decrypting passwords retrieved from a Manage Engine OpManager installation☆11Updated 9 years ago
- The repository accompanying the Buer Emulation workshop☆24Updated 3 years ago
- .net tool that uses WMI queries to enumerate active sessions and accounts configured to run services on remote systems☆33Updated 5 years ago
- module for certexfil☆15Updated 2 years ago
- ☆13Updated 3 years ago
- ☆25Updated 6 years ago
- Cobalt Strike log state tracking, parsing, and storage☆23Updated 5 years ago
- Do the unexpected with AD GPO processing☆9Updated 5 years ago
- Scripts to automate standing up apache2 with mod_rewrite in front of C2 servers.☆46Updated 4 years ago
- ☆28Updated 7 years ago
- Tool to manage user privileges☆28Updated 5 years ago
- parsers to make life easier☆12Updated 4 years ago