secabstraction / PowerWalker

Related projects ⓘ

Alternatives and complementary repositories for PowerWalker

• miriamxyra / Excel-EventList-OLD
  EventList - the Baseline Event Analyzer
  ☆11Updated 5 years ago
• mattifestation / WindowsEventLogMetadata
  Event metadata collected across all manifest-based ETW providers on Window 10 1903
  ☆30Updated 4 years ago
• mattifestation / CatalogTools
  A PowerShell module to assist in parsing and managing catalog files.
  ☆20Updated 7 years ago
• stolenbytes / apcforthewin
  ☆16Updated 7 years ago
• abhisek / RandomCode
  Random Code Store
  ☆17Updated last year
• mattifestation / UnicornPowerShell
  A PowerShell binding for the Unicorn Engine
  ☆16Updated 8 years ago
• zacbrown / PowerShellMethodAuditor
  PowerShellMethodAuditor listens to the PowerShell ETW provider and logs PowerShell method invocations.
  ☆37Updated 7 years ago
• OsandaMalith / VBShellCode
  Making shellcode UD - https://osandamalith.com
  ☆24Updated 8 years ago
• hasherezade / IAT_patcher_samples
  Sample libraries to be used with IAT Patcher
  ☆33Updated 2 years ago
• psmitty7373 / eif
  Evil Reflective DLL Injection Finder
  ☆45Updated 5 years ago
• airbus-cert / PSTrace
  Trace ScriptBlock execution for powershell v2
  ☆39Updated 4 years ago
• mattifestation / MSFTTraceMessageFormat
  All TMF files that I extracted from Microsoft PDBs.
  ☆12Updated 5 years ago
• libyal / libfwevt
  Library for Windows XML Event Log (EVTX) data types
  ☆17Updated last month
• giMini / PowerRSA
  Generate RSA keys, encrypt and decrypt data
  ☆24Updated 3 years ago
• zodiacon / DotNextSP2019
  DotNext 2019 St. Petersburg Talk Demos
  ☆36Updated 5 years ago
• A-mIn3 / Windows_Postex
  Post-explotation Hacks
  ☆14Updated 5 years ago
• glinares / CSCGuard
  Protects and logs suspicious and malicious usage of .NET CSC.exe and Runtime C# Compilation
  ☆25Updated 6 years ago
• zacbrown / hiddentreasure-etw-demo
  Basic demo for Hidden Treasure talk.
  ☆49Updated 7 years ago
• SummitRoute / srepp_server
  Summit Route End Point Protection - Server code
  ☆12Updated 8 years ago
• glmcdona / MALM
  MALM: Malware Monitor
  ☆45Updated 11 years ago
• AlephNull314 / AbsoluteZero
  Anti-AV compilation
  ☆42Updated 11 years ago
• TKCERT / winnti-detector
  Network detector for Winnti malware
  ☆20Updated 6 years ago
• MortenSchenk / Windows-Write-Execute
  Find subfolders in the Windows folder which have bad ACL and allow write and execute
  ☆14Updated 9 years ago
• deroko / activationcontexthook
  ☆33Updated 7 years ago
• matthastings / PSalander
  ☆51Updated 6 years ago
• jeperez / windows-operating-system-archaeology
  windows-operating-system-archaeology @Enigma0x3 @subTee
  ☆44Updated 7 years ago
• nccgroup / WindowsMemPageDelta
  A Microsoft Windows service to provide telemetry on Windows executable memory page changes to facilitate threat detection
  ☆28Updated 4 years ago