randomaccess3 / block-parser
Parser for Windows PowerShell script block logs
☆13Updated 4 months ago
Alternatives and similar repositories for block-parser:
Users that are interested in block-parser are comparing it to the libraries listed below
- OMIGOD! OM I GOOD? A free scanner to detect VMs vulnerable to one of the "OMIGOD" vulnerabilities discovered by Wiz's threat research tea…☆18Updated 3 years ago
- A collection of tools adversaries commonly use in an attack.☆14Updated 5 months ago
- This is a repo for fetching Applocker event log by parsing the win-event log☆30Updated 2 years ago
- ☆23Updated 2 months ago
- Indicators of Normality☆12Updated 2 years ago
- HoneyZure is a honeypot tool specifically designed for Azure environments, fully provisioned through Terraform. It leverages a Log Analyt…☆16Updated 10 months ago
- Kibana app for RedELK☆17Updated 2 years ago
- OpenHashAPI provides a secure method of communicating hashes and enables lightweight workflows for security practitioners and enthusiasts…☆14Updated 6 months ago
- EventLogSilencer is a PowerShell script designed for disable Windows Event Logging☆16Updated last year
- ☆15Updated 3 months ago
- ☆11Updated 4 years ago
- ☆18Updated last year
- Parser for Sdba memory pool tags☆18Updated 3 years ago
- Helper script for BloodHound to automatically add relationships between multiple accounts owned by the same individual☆14Updated 2 years ago
- A cap/pcap packet parser to make life easier when performing stealth/passive reconnaissance.☆21Updated 9 months ago
- ☆14Updated last year
- Automated activity logging utility for Mythic C2 v3.0+ with Ghostwriter v3.0+☆17Updated 2 months ago
- Speaking materials from conferences I've given☆9Updated 2 years ago
- Track previous changes on specific AD accounts (users, computers) and Groups (online DC), even if event logs were wiped/not collected (e.…☆16Updated 2 months ago
- Python web app for previewing data in a Chrome Profile Folder☆20Updated 10 months ago
- Modified-Thycotic-Secret-Stealer for use with DPAPI and offline Decryption☆19Updated 2 years ago
- JXA script for Mythic that prints the TCC.db☆15Updated 4 years ago
- Extension functionality for the NightHawk operator client☆27Updated last year
- Go module that allows you to authenticate to Azure with a well known client ID using interactive logon and grab the token☆26Updated 2 years ago
- ☆14Updated last year
- Hash collisions and their exploitations☆9Updated 2 years ago
- python3 scripts to help with aws triage needs☆15Updated 3 years ago
- ☆12Updated 2 years ago
- USB HID driver emulation with PID/VID (0x3bca/0x27bb) of Plenom A/S Busylight Alpha, that is supported by Mimikatz. When mimikatz is exec…☆20Updated 2 years ago
- The repository accompanying the Buer Emulation workshop☆24Updated 3 years ago