trustedsec / tscopyLinks
☆94Updated last month
Alternatives and similar repositories for tscopy
Users that are interested in tscopy are comparing it to the libraries listed below
Sorting:
- Visual Studio Code Microsoft Sysinternal Sysmon configuration file extension.☆53Updated 2 years ago
- Simple PowerShell script to enable process scanning with Yara.☆96Updated 3 years ago
- Evtx Log (xml) Browser☆55Updated 2 years ago
- Manipulate timestamps on NTFS☆53Updated 10 years ago
- ☆38Updated 3 years ago
- Detect possible sysmon logging bypasses given a specific configuration☆110Updated 6 years ago
- A library for fast parse & import of Windows Eventlogs into Elasticsearch.☆84Updated 4 months ago
- See adversary, do adversary: Simple execution of commands for defensive tuning/research (now with more ELF on the shelf)☆104Updated 2 years ago
- LLMNR/NBNS/mDNS Spoofing Detection Toolkit☆59Updated 3 years ago
- This repository aims to collect and document indicators from the different C2's listed in the C2-Matrix☆74Updated 3 years ago
- Carbon Black Response IR tool☆55Updated 4 years ago
- A collection of various tools for red-teaming exercises. A mix of C#, Powershell, & Python☆107Updated last year
- A list of JARM hashes for different ssl implementations used by some C2/red team tools.☆144Updated 2 years ago
- Rhaegal is a tool written in Python 3 used to scan Windows Event Logs for suspicious logs. Rhaegal uses custom rule format to detect sus…☆41Updated 2 years ago
- ☆46Updated 2 years ago
- A powershell parser for https://github.com/ufrisk/MemProcFS☆43Updated 4 years ago
- PS-TrustedDocuments: PowerShell script to handle information on trusted documents for Microsoft Office☆35Updated 2 years ago
- AdHoc solutions☆48Updated 2 years ago
- A set of tools for collecting forensic information☆26Updated 5 years ago
- ☆36Updated 2 years ago
- AV/EDR evasion via direct system calls.☆32Updated 4 years ago
- Windows.EDB Browser☆58Updated 2 years ago
- ARTi-C2 is a post-exploitation framework used to execute Atomic Red Team test cases with rapid payload deployment and execution capabili…☆177Updated 2 months ago
- ☆150Updated last year
- My conference presentations☆85Updated last month
- Browse Windows Prefetch versions: 17,23,26,30v1/2,31 & some of SuperFetch .7db/.db's☆62Updated 10 months ago
- The Diagon Attack Framework is a Prismatica application containing the Ravenclaw, Gryffindor, and Slytherin remote access tools (RATs).☆53Updated 2 years ago
- Triaging Windows event logs based on SANS Poster☆41Updated last month
- ☆28Updated 3 years ago
- SysInternals' Process Monitor filters repository - collected from various places and made up by myself. To be used for quick Behavioral a…☆70Updated 4 years ago