scrt / event_maskerLinks
Event Masker is a Splunk streaming command to mask event from search based on a list of rules that contain conditions.
☆16Updated 3 years ago
Alternatives and similar repositories for event_masker
Users that are interested in event_masker are comparing it to the libraries listed below
Sorting:
- Implementation of ITaskHandler in C++☆14Updated 2 years ago
- A POC C2 server and agent to explore just if/how the Ethereum blockchain can be used for C2☆75Updated 6 years ago
- A spiritual .NET equivalent to the Gargoyle memory scanning evasion technique☆52Updated 7 years ago
- AMSI detection PoC☆31Updated 5 years ago
- Slides from out talk at BH IL 2022☆29Updated 3 years ago
- ☆21Updated 5 years ago
- Encrypted Shellcode Loader Generator☆22Updated 6 years ago
- Synaptics Audio Driver LPE☆37Updated 6 years ago
- ☆24Updated 4 years ago
- Executes shellcode from a remote server and aims to evade in-memory scanners☆31Updated 6 years ago
- Experiments on the Windows Internals☆31Updated 6 years ago
- Tool to manage user privileges☆31Updated 6 years ago
- Proof of Concept code for CVE-2020-0728☆47Updated 5 years ago
- CVE-2020-5837 exploit☆43Updated 5 years ago
- Adobe Reader DC Information Leak Exploit☆23Updated 3 years ago
- ollvm, based on llvm-clang 5.0.2, 6.0.1, 7.0.1, 8.0, 9.0, 9.0.1☆19Updated 3 years ago
- CVE-2020-1048 bypass: binary planting PoC☆33Updated 5 years ago
- Silent Cleanup UAC Bypass POC☆11Updated 6 years ago
- CVE-2021-1732 poc & exp; tested on 20H2☆67Updated 4 years ago
- CSharp Writeups for HackSys Extreme Vulnerable Driver☆45Updated 4 years ago
- Example of async client/server sockets in .NET 5☆17Updated 4 years ago
- ☆31Updated 5 years ago
- ETWNetMonv3 is simple C# code for Monitoring TCP Network Connection via ETW & ETWProcessMon/2 is for Monitoring Process/Thread/Memory/Ima…☆41Updated 2 years ago
- Ntdll Unhooking POC☆19Updated 3 years ago
- Create a Run registry key with direct system calls. Inspired by @Cneelis's Dumpert and SharpHide.☆79Updated 5 years ago
- Recreating and reviewing the Windows persistence methods☆39Updated 4 years ago
- A *very* imperfect attempt to correlate Kernel32 function calls to native API (Nt/Zw) counterparts/execution flow.☆28Updated 4 years ago
- Two C# RunPE's capable of x86 and x64 injections☆11Updated 7 years ago
- ☆27Updated 5 years ago
- A Docker container used to easily compile Nim binaries generated by my tools (NimPackt and NimPlant)☆16Updated 2 years ago