a tiny program to consume from ETW providers for research
☆55Jan 4, 2025Updated last year
Alternatives and similar repositories for PockETWatcher
Users that are interested in PockETWatcher are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A proof-of-concept re-assembler for reverse VNC traffic.☆24May 21, 2023Updated 2 years ago
- simple C# portscanner - written for playing around with Metasploit's Execute-Assembly☆10Jul 1, 2023Updated 2 years ago
- Indicators of compromise from to analysis and research by Nextron Threat Research team☆12Sep 17, 2025Updated 6 months ago
- The home of the SDDLMaker☆29Jan 13, 2025Updated last year
- Tool designed to exfiltrate OneDrive Business OCR Data☆127Jan 27, 2025Updated last year
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- A public repository of MITRE ATT&ACK TTP mappings by BushidoUK for OSINT reports that lack a section breaking down the TTPs.☆27Mar 20, 2025Updated last year
- Living of the Land of Free SaaS☆63Updated this week
- Test AMSI Provider implementation in C#☆43Dec 18, 2024Updated last year
- ☆33Feb 26, 2022Updated 4 years ago
- Slides for COM Hijacking AV/EDR Talk on 38c3☆75Jan 3, 2025Updated last year
- This repo contains a list of vendors that hide their security advisories, alerts, notices, vulnerabilities, and more behind either a payw…☆32May 11, 2024Updated last year
- An implementation of a Windows Event Collector server running on GNU/Linux.☆94Jan 27, 2026Updated 2 months ago
- A post-processing script for TinyTracer☆39Mar 22, 2023Updated 3 years ago
- Invoke-ArgFuscator is an open-source, cross-platform PowerShell module that helps generate obfuscated command-lines for common system-nat…☆272Feb 13, 2026Updated last month
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click and start building anything your business needs.
- Convert Microsoft Defender Antivirus Signatures (VDM) into YARA rules☆150Updated this week
- ☆262May 9, 2024Updated last year
- ☆15Sep 24, 2024Updated last year
- Shellcode loader☆101Nov 24, 2024Updated last year
- ☆23Jun 1, 2022Updated 3 years ago
- SQL, IIS, Oh My...☆22Feb 24, 2025Updated last year
- Quickly search for references to a GUID in DLLs, EXEs, and drivers☆74Dec 10, 2021Updated 4 years ago
- Expose a lot of MDE telemetry that is not easily accessible in any searchable form☆119Aug 19, 2025Updated 7 months ago
- ☆14Feb 12, 2026Updated last month
- NordVPN Special Discount Offer • AdSave on top-rated NordVPN 1 or 2-year plans with secure browsing, privacy protection, and support for for all major platforms.
- A repository of credential stealer formats☆252Jun 10, 2025Updated 9 months ago
- Active Directory Group Policy analyzer☆18Sep 20, 2019Updated 6 years ago
- Helps defenders find their WSUS configurations in the wake of CVE-2025-59287☆46Oct 28, 2025Updated 4 months ago
- yaa - yaml search for humans☆12Dec 8, 2025Updated 3 months ago
- "Service-less" driver loading☆184Nov 28, 2024Updated last year
- Windows Event Log Knowledge Base☆31Dec 23, 2025Updated 3 months ago
- Red teaming tool to dump LSASS memory, bypassing basic countermeasures.☆246Mar 9, 2026Updated 2 weeks ago
- ☆56Mar 5, 2026Updated 3 weeks ago
- ☆234Jun 10, 2025Updated 9 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click and start building anything your business needs.
- Mythic C2 wrapper for NimSyscallPacker☆25Mar 12, 2025Updated last year
- A new technique that can be used to bypass memory scanners. This can be useful in hiding problematic code (such as reflective loaders imp…☆346Oct 7, 2024Updated last year
- COM Hijacking VOODOO☆379Nov 27, 2025Updated 4 months ago
- A care package of useful bofs for red team engagments☆53Dec 6, 2024Updated last year
- Aims to identify sleeping beacons☆663Jan 25, 2026Updated 2 months ago
- ☆182Apr 24, 2025Updated 11 months ago
- Ansible role for installing Sysmon with popular config files included.☆24Jan 8, 2023Updated 3 years ago