a tiny program to consume from ETW providers for research
☆55Jan 4, 2025Updated last year
Alternatives and similar repositories for PockETWatcher
Users that are interested in PockETWatcher are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A proof-of-concept re-assembler for reverse VNC traffic.☆24May 21, 2023Updated 3 years ago
- Indicators of compromise from to analysis and research by Nextron Threat Research team☆19Updated this week
- simple C# portscanner - written for playing around with Metasploit's Execute-Assembly☆10Jul 1, 2023Updated 3 years ago
- A public repository of MITRE ATT&ACK TTP mappings by BushidoUK for OSINT reports that lack a section breaking down the TTPs.☆27Mar 20, 2025Updated last year
- ☆33Feb 26, 2022Updated 4 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Slides for COM Hijacking AV/EDR Talk on 38c3☆74Jan 3, 2025Updated last year
- A post-processing script for TinyTracer☆40Mar 22, 2023Updated 3 years ago
- Tool designed to exfiltrate OneDrive Business OCR Data☆131Jan 27, 2025Updated last year
- Browser extension blocking scam and phishing pages https://chromewebstore.google.com/detail/nehboro/ljgklnaofelbcnegjniagpmjknkmaiom☆17Apr 22, 2026Updated 5 months ago
- This repo contains a list of vendors that hide their security advisories, alerts, notices, vulnerabilities, and more behind either a payw…☆32May 11, 2024Updated 2 years ago
- Querying And Deleting Shadow Copies Using The IOCTL_VOLSNAP_QUERY_NAMES_OF_SNAPSHOTS & IOCTL_VOLSNAP_DELETE_SNAPSHOT IOCTLs☆22Aug 7, 2025Updated last year
- ☆23Jun 1, 2022Updated 4 years ago
- Invoke-ArgFuscator is an open-source, cross-platform PowerShell module that helps generate obfuscated command-lines for common system-nat…☆279Feb 13, 2026Updated 7 months ago
- ☆264May 9, 2024Updated 2 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ☆15Sep 24, 2024Updated 2 years ago
- Quickly search for references to a GUID in DLLs, EXEs, and drivers☆75Dec 10, 2021Updated 4 years ago
- The home of the SDDLMaker☆29Jan 13, 2025Updated last year
- ☆209May 10, 2026Updated 4 months ago
- Expose a lot of MDE telemetry that is not easily accessible in any searchable form☆122Aug 19, 2025Updated last year
- Test AMSI Provider implementation in C#☆45Dec 18, 2024Updated last year
- ☆17Sep 16, 2026Updated last week
- Shellcode loader☆104Nov 24, 2024Updated last year
- ☆66Sep 10, 2026Updated 2 weeks ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- ☆14Feb 12, 2026Updated 7 months ago
- Active Directory Group Policy analyzer☆17Sep 20, 2019Updated 7 years ago
- yaa - yaml search for humans☆12Dec 8, 2025Updated 9 months ago
- Exploit AD CS misconfiguration allowing privilege escalation and persistence from any child domain to full forest compromise☆135Dec 2, 2023Updated 2 years ago
- Windows Event Log Knowledge Base☆36Jul 6, 2026Updated 2 months ago
- "Service-less" driver loading☆191Nov 28, 2024Updated last year
- Scripts to manage "Auto Time Zone Updater" 'tzautoupdate' service on a Windows device. Intended to be used as "Remediations", in Microsof…☆17Jul 12, 2024Updated 2 years ago
- Execute shellcode via ASPNET compiler☆60Oct 2, 2025Updated 11 months ago
- Mythic C2 wrapper for NimSyscallPacker☆26Mar 12, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- An implementation of a Windows Event Collector server running on GNU/Linux.☆103Sep 8, 2026Updated 2 weeks ago
- ☆237Jun 10, 2025Updated last year
- An adaptation of timwhitez's proxycall that uses kernelbase.dll!Beep.☆16Nov 1, 2023Updated 2 years ago
- A care package of useful bofs for red team engagments☆52Dec 6, 2024Updated last year
- COM Hijacking VOODOO☆388Sep 15, 2026Updated last week
- Ansible role for installing Sysmon with popular config files included.☆24Jan 8, 2023Updated 3 years ago
- A proof‑of‑concept C2 framework that uses Server‑Sent Events (SSE) and the MCP protocol for agent registration, command dispatch, and res…☆35Apr 28, 2025Updated last year