nccgroup / WindowsJobLock

Related projects ⓘ

Alternatives and complementary repositories for WindowsJobLock

• airbus-cert / etwbreaker
  An IDA plugin to deal with Event Tracing for Windows (ETW)
  ☆50Updated 2 years ago
• tyranid / DumpReparsePoints
  This is a simple tool to dump all the reparse points on an NTFS volume.
  ☆31Updated 4 years ago
• yardenshafir / CallbackObjectAnalyzer
  Dumps information about all the callback objects found in a dump file and the functions registered for them
  ☆34Updated 4 years ago
• thalium / WinDbgFastObj
  ☆20Updated 3 years ago
• zodiacon / NativeApps
  Demos and presentation from SECArmy Village Grayhat 2020
  ☆36Updated last year
• MathildeVenault / SysMainView
  This tool is the result of a reverse engineering process of the Windows service called SysMain. Time to interact with the prefetch files …
  ☆30Updated 4 years ago
• peterwintersmith / crystalaep
  Crystal Anti-Exploit Protection 2012
  ☆35Updated 4 years ago
• mandiant / win10_rekall
  Rekall Memory Forensic Framework
  ☆29Updated 5 years ago
• hasherezade / paramkit
  A small library helping to parse commandline parameters (for C/C++)
  ☆53Updated last year
• NtRaiseHardError / Sysmon
  Sysmon shenanigans
  ☆65Updated 4 years ago
• nccgroup / WindowsMemPageDelta
  A Microsoft Windows service to provide telemetry on Windows executable memory page changes to facilitate threat detection
  ☆28Updated 4 years ago
• ionescu007 / hazmat5
  Local OXID Resolver (LCLOR) : Research and Tooling
  ☆33Updated 3 years ago
• nccgroup / mimikatz-detector-condrv
  The Console Monitor Driver is a KMDF kernel-mode filter driver that captures certain Fast I/O operations (input and output) that is sent …
  ☆36Updated 2 years ago
• mandiant / win10_auto
  ☆24Updated 5 years ago
• deroko / activationcontexthook
  ☆33Updated 7 years ago
• zodiacon / Blog
  Blog posts
  ☆30Updated 4 years ago
• Truneski / WindowsKernelProgramming-Exercises
  ☆49Updated 4 years ago
• deroko / activationcontext
  ☆14Updated 6 years ago
• hasherezade / libpeconv_tpl
  A ready-made template for a project based on libpeconv.
  ☆41Updated last month
• gamozolabs / pdblister
  Faster version of `symchk /om` for generating PDB manifests of offline machines
  ☆19Updated 3 years ago
• hotnops / RemoteDebugView
  A DLL that serves OutputDebugString content over a TCP connection
  ☆34Updated 3 years ago
• hasherezade / tag_converter
  ☆21Updated 3 years ago
• airbus-cert / cacdec
  The hidden mstsc recorder player
  ☆28Updated 4 years ago
• nogginware / mstscdump
  MSTSC Packet Dump Utility
  ☆27Updated 2 years ago
• hotnops / COM_Mapper
  A tool to create COM class/interface relationships in neo4j
  ☆47Updated 2 years ago
• MortenSchenk / tagWnd-Hardening-Bypass
  Bypass for the hardening against usage of tagWnd as a kernel read/write primitive
  ☆26Updated 7 years ago
• Biswa96 / TraceEvent
  Trace events in real time sessions
  ☆43Updated last year