A Microsoft Windows service to provide telemetry on Windows executable memory page changes to facilitate threat detection
☆32Oct 7, 2020Updated 5 years ago
Alternatives and similar repositories for WindowsMemPageDelta
Users that are interested in WindowsMemPageDelta are comparing it to the libraries listed below
Sorting:
- A collection of tools to enumerate and analyse Windows DACLs☆109Jul 11, 2015Updated 10 years ago
- Windows Process Lockdown Tool using Job Objects☆70Nov 10, 2013Updated 12 years ago
- DLL hijacking vulnerability scanner and PE infector tool☆20Sep 8, 2017Updated 8 years ago
- Python3 Ebowla... 3Bowla☆17Jan 7, 2020Updated 6 years ago
- An example pattern in C# for using WMI to monitor process creation and termination events.☆53Aug 13, 2018Updated 7 years ago
- A variation CredBandit that uses compression to reduce the size of the data that must be trasnmitted.☆19Jun 24, 2021Updated 4 years ago
- A Generic Windows Memory Scraping Tool☆70Apr 20, 2017Updated 8 years ago
- ☆18Jul 3, 2020Updated 5 years ago
- CLI Search for Security Operators of MITRE ATT&CK URLs☆17Jan 5, 2023Updated 3 years ago
- Hostile Dropboxes Management☆26Jan 8, 2020Updated 6 years ago
- All TMF files that I extracted from Microsoft PDBs.☆14Jun 29, 2019Updated 6 years ago
- Implementation trade-offs in using Intel Pin for instruction tracing of complex programs☆15Oct 16, 2019Updated 6 years ago
- ☆24Sep 26, 2021Updated 4 years ago
- An experimental dynamic malware unpacker based on Intel Pin and PE-sieve☆63Aug 21, 2024Updated last year
- ☆28Aug 10, 2019Updated 6 years ago
- ☆26Sep 29, 2022Updated 3 years ago
- A command line tool that sends its input data to a running procmon instance.☆16Feb 24, 2017Updated 9 years ago
- A tool for Windows that can make any program work within file-system transactions.☆59Nov 12, 2020Updated 5 years ago
- Tool to download, install, and run macOS capable command & control servers (i.e., C2s with macOS payloads/clients) as docker containers f…☆19Dec 29, 2020Updated 5 years ago
- Files for http://deniable.org/windows/windows-callbacks☆26Jul 9, 2020Updated 5 years ago
- ☆16May 15, 2021Updated 4 years ago
- Self-Loading Registration Free COM Functions☆11Nov 12, 2019Updated 6 years ago
- ☆13Jul 14, 2020Updated 5 years ago
- Web access logs analyzer - provides an insight on how remote hosts behave☆15Sep 13, 2021Updated 4 years ago
- Proof of concept - Covert Channel using Windows Filtering Platform (C#)☆21Aug 29, 2021Updated 4 years ago
- Basic C# Project that will take an MSBuild payload and run it with MSBuild via ClickOnce.☆93Oct 24, 2020Updated 5 years ago
- PE File Blessing - To continue or not to continue☆87Nov 23, 2019Updated 6 years ago
- Insider Threat Detection using Isolation Forest☆17Jun 1, 2018Updated 7 years ago
- ☆53Feb 27, 2017Updated 9 years ago
- ☆156Jul 31, 2022Updated 3 years ago
- A pure C version of SymProcAddress☆30Mar 17, 2024Updated 2 years ago
- Bypassing NTFS permissions to read any files as unprivileged user.☆190Oct 21, 2020Updated 5 years ago
- Live hunting of code injection techniques☆385Aug 22, 2019Updated 6 years ago
- ☆37Dec 27, 2021Updated 4 years ago
- A Generic WOW64 Process Blocker☆14Jul 16, 2021Updated 4 years ago
- Sysmon-Like research tool for ETW☆387Nov 15, 2022Updated 3 years ago
- Go wrapper for in-memory DLL module loader, MemoryModule☆32Feb 13, 2018Updated 8 years ago
- ☆11Sep 23, 2017Updated 8 years ago
- Magellan PoC☆34Jan 23, 2019Updated 7 years ago