nccgroup / UninstalledAppCanary
A Canary which fires when uninstalled
☆34Updated 3 years ago
Related projects ⓘ
Alternatives and complementary repositories for UninstalledAppCanary
- A PowerShell script to prevent Sysmon from writing its events☆14Updated 4 years ago
- Apfell implant written in C#.☆8Updated 3 years ago
- parsers to make life easier☆12Updated 4 years ago
- Extracts Azure authentication tokens from PowerShell process minidumps.☆23Updated last year
- SSDP Service Discovery☆16Updated 5 years ago
- pypykatz plugin for volatility3 framework☆31Updated 7 months ago
- A cross platform tool for verifying credentials and executing single commands☆32Updated 5 years ago
- ☆13Updated 3 years ago
- Log converter from CS log to Ghostwriter CSV☆29Updated 4 years ago
- ☆14Updated 4 years ago
- This is a 64 bit VBA implementation of Christophe Tafani-Dereeper's original VBA code described in his blog @ https://blog.christophetd.f…☆19Updated 4 years ago
- Protect your servers with a secret header☆28Updated 4 years ago
- Forked and updated with some additional features over the original☆16Updated 3 years ago
- reboot of https://github.com/Genetic-Malware/Ebowla in order to simplify / modernize the codebase and provide ongoing support☆21Updated 3 years ago
- Apply a filter to the events being reported by windows event logging☆15Updated 4 years ago
- Helper script for BloodHound to automatically add relationships between multiple accounts owned by the same individual☆13Updated 2 years ago
- Walking the PEB in VBA☆22Updated 4 years ago
- Identify common attack paths to get Domain Administrator☆22Updated 5 years ago
- RID Hijacking Proof of Concept script by Kevin Joyce☆15Updated 6 years ago
- Work in Progress repo☆14Updated 5 years ago
- A tool to sync mythic events with ghostwriter oplog.☆12Updated this week
- .net tool that uses WMI queries to enumerate active sessions and accounts configured to run services on remote systems☆32Updated 4 years ago
- LetMeOutOfYour.net Resources☆20Updated 4 years ago
- Reproducible and extensible BloodHound playbooks☆42Updated 4 years ago
- Network Finger Printer☆16Updated 7 years ago
- Exactly what it sounds like, which is something rad☆20Updated 2 years ago
- Cobalt Strike log state tracking, parsing, and storage☆22Updated 5 years ago