nccgroup / WindowsJobLock

Related projects: ⓘ

• nogginware / mstscdump
  MSTSC Packet Dump Utility
  ☆26Updated 2 years ago
• AndreyBazhan / DbgPkg
  Scripts to prepare Windows system for debugging.
  ☆29Updated 3 years ago
• peterwintersmith / crystalaep
  Crystal Anti-Exploit Protection 2012
  ☆35Updated 4 years ago
• nccgroup / WindowsMemPageDelta
  A Microsoft Windows service to provide telemetry on Windows executable memory page changes to facilitate threat detection
  ☆28Updated 3 years ago
• zodiacon / NativeApps
  Demos and presentation from SECArmy Village Grayhat 2020
  ☆36Updated last year
• tyranid / DumpReparsePoints
  This is a simple tool to dump all the reparse points on an NTFS volume.
  ☆32Updated 4 years ago
• Biswa96 / TraceEvent
  Trace events in real time sessions
  ☆42Updated last year
• yardenshafir / CallbackObjectAnalyzer
  Dumps information about all the callback objects found in a dump file and the functions registered for them
  ☆32Updated 3 years ago
• airbus-cert / etwbreaker
  An IDA plugin to deal with Event Tracing for Windows (ETW)
  ☆49Updated 2 years ago
• NtRaiseHardError / Sysmon
  Sysmon shenanigans
  ☆65Updated 3 years ago
• odzhan / shells
  ☆15Updated this week
• ionescu007 / hazmat5
  Local OXID Resolver (LCLOR) : Research and Tooling
  ☆31Updated 3 years ago
• thalium / WinDbgFastObj
  ☆20Updated 3 years ago
• MathildeVenault / SysMainView
  This tool is the result of a reverse engineering process of the Windows service called SysMain. Time to interact with the prefetch files …
  ☆30Updated 3 years ago
• mandiant / win10_rekall
  Rekall Memory Forensic Framework
  ☆29Updated 5 years ago
• Truneski / WindowsKernelProgramming-Exercises
  ☆48Updated 4 years ago
• deroko / activationcontexthook
  ☆33Updated 6 years ago
• zodiacon / DotNextSP2019
  DotNext 2019 St. Petersburg Talk Demos
  ☆36Updated 5 years ago
• nccgroup / mimikatz-detector-condrv
  The Console Monitor Driver is a KMDF kernel-mode filter driver that captures certain Fast I/O operations (input and output) that is sent …
  ☆34Updated 2 years ago
• am0nsec / vxlib
  C Header Only Library for Virii
  ☆9Updated 3 years ago
• hasherezade / libpeconv_tpl
  A ready-made template for a project based on libpeconv.
  ☆40Updated last year
• hasherezade / paramkit
  A small library helping to parse commandline parameters (for C/C++)
  ☆53Updated last year
• xpn / RpcEnum
  An command-line RPC method enumerator, born out of RPCView's awesomeness
  ☆97Updated 5 years ago
• zodiacon / Blog
  Blog posts
  ☆30Updated 4 years ago
• zodiacon / TaskSched
  ☆26Updated last year
• hotnops / RemoteDebugView
  A DLL that serves OutputDebugString content over a TCP connection
  ☆33Updated 2 years ago
• nccgroup / ICPin
  An Integrity-Check Monitoring Pintool
  ☆56Updated 3 years ago
• hotnops / COM_Mapper
  A tool to create COM class/interface relationships in neo4j
  ☆47Updated last year
• mandiant / win10_auto
  ☆23Updated 5 years ago