randomaccess3 / block-parser
Parser for Windows PowerShell script block logs
☆13Updated 2 months ago
Alternatives and similar repositories for block-parser:
Users that are interested in block-parser are comparing it to the libraries listed below
- OMIGOD! OM I GOOD? A free scanner to detect VMs vulnerable to one of the "OMIGOD" vulnerabilities discovered by Wiz's threat research tea…☆18Updated 3 years ago
- ☆15Updated 3 years ago
- ☆14Updated 10 months ago
- A cap/pcap packet parser to make life easier when performing stealth/passive reconnaissance.☆21Updated 8 months ago
- A collection of tools adversaries commonly use in an attack.☆14Updated 3 months ago
- python3 scripts to help with aws triage needs☆15Updated 3 years ago
- Kibana app for RedELK☆16Updated 2 years ago
- ☆12Updated 2 years ago
- ☆22Updated 2 weeks ago
- OpenHashAPI provides a secure method of communicating hashes and enables lightweight workflows for security practitioners and enthusiasts…☆14Updated 4 months ago
- This is a repo for fetching Applocker event log by parsing the win-event log☆30Updated 2 years ago
- A Canary which fires when uninstalled☆34Updated 4 years ago
- Registry hive parsing the async way☆21Updated last week
- Track previous changes on specific AD accounts (users, computers) and Groups (online DC), even if event logs were wiped/not collected (e.…☆15Updated 3 weeks ago
- Leverages B64 chunks to split files and save to clipboard☆25Updated 9 months ago
- Parser for Sdba memory pool tags☆17Updated 3 years ago
- Cmdlets for capturing Windows Events☆14Updated 3 years ago
- Helper script for BloodHound to automatically add relationships between multiple accounts owned by the same individual☆13Updated 2 years ago
- USB HID driver emulation with PID/VID (0x3bca/0x27bb) of Plenom A/S Busylight Alpha, that is supported by Mimikatz. When mimikatz is exec…☆20Updated 2 years ago
- Indicators of Normality☆12Updated 2 years ago
- reboot of https://github.com/Genetic-Malware/Ebowla in order to simplify / modernize the codebase and provide ongoing support☆22Updated 3 years ago
- powershell script i wrote that can suspend an arbitrary process (with limits)☆20Updated last year
- HoneyZure is a honeypot tool specifically designed for Azure environments, fully provisioned through Terraform. It leverages a Log Analyt…☆16Updated 9 months ago
- Extension functionality for the NightHawk operator client☆27Updated last year
- ☆27Updated last year
- Go module that allows you to authenticate to Azure with a well known client ID using interactive logon and grab the token☆25Updated 2 years ago
- ☆17Updated last year
- Scripts to for ready-to-use Velociraptor instance deployment in Azure☆13Updated last year
- ☆33Updated 3 years ago
- This project provides Base64 encoding and decoding functionality to PowerShell within Constrained Language Mode☆24Updated 8 months ago