Alternatives and similar repositories for TaskSched

Users that are interested in TaskSched are comparing it to the libraries listed below

• secana / CertDump
  Dump certificates from PE files in different formats
  ☆38Updated last year
• mobdk / CloneProcess
  Clone running process with ZwCreateProcess
  ☆59Updated 5 years ago
• malcomvetter / WMIProcessWatcher
  An example pattern in C# for using WMI to monitor process creation and termination events.
  ☆53Updated 7 years ago
• SadProcessor / EzETW
  Cmdlets for capturing Windows Events
  ☆14Updated 3 years ago
• zodiacon / InfStudio
  INF Studio for easier working with driver installation files
  ☆38Updated 2 years ago
• decoder-it / CreateTokenExample
  ☆18Updated 6 years ago
• jborean93 / PSDetour-Hooks
  Auditing Hooks for https://github.com/jborean93/PSDetour
  ☆13Updated 7 months ago
• nccgroup / mimikatz-detector-condrv
  The Console Monitor Driver is a KMDF kernel-mode filter driver that captures certain Fast I/O operations (input and output) that is sent …
  ☆41Updated 3 years ago
• VergiliusProject / kernels-data
  Windows kernel PDB data parsed into YAML
  ☆41Updated last month
• nickvangilder / To-Safe-Mode-And-Beyond
  A tool for leveraging elevated acess over a computer to boot the computer into Windows Safe Mode, alter settings, and then boot back into…
  ☆16Updated 4 years ago
• jonny-jhnson / MSFT_DriverBlockList
  Repository of Microsoft Driver Block Lists based off of OS-builds
  ☆42Updated last year
• Fleex255 / CustomShim
  Example/starter code for custom Windows application compatibility shims
  ☆35Updated 4 years ago
• zodiacon / BITSManager
  BITS Transfers Manager
  ☆44Updated 7 months ago
• TimMisiak / windup
  WinDbg installer/updater
  ☆42Updated 2 years ago
• zodiacon / WMIExplorer
  ☆25Updated 5 months ago
• zodiacon / ApiSetView
  API Set Viewer
  ☆90Updated 11 months ago
• KnicKnic / native-powershell
  A C DLL that can control powershell
  ☆50Updated 6 years ago
• Harvester57 / CodeIntegrity-DriverBlocklist
  ☆20Updated 6 months ago
• lilkui / runasti
  Runs programs as TrustedInstaller
  ☆49Updated 6 years ago
• nccgroup / WindowsMemPageDelta
  A Microsoft Windows service to provide telemetry on Windows executable memory page changes to facilitate threat detection
  ☆32Updated 5 years ago
• pwndizzle / com-research
  Research into COM
  ☆19Updated 5 years ago
• rbmm / partial
  d
  ☆14Updated 3 months ago
• TheWover / ModuleMonitor
  Uses WMI Event Win32_ModuleLoadTrace to monitor module loading. Provides filters, and detailed data. Has an option to monitor for CLR Inj…
  ☆42Updated 6 years ago
• s4dbrd / ETWReader
  Read ETW Provider events. Inspired by ETWExplorer by Pavel Yosifovich
  ☆17Updated last year
• zodiacon / syllabi
  ☆63Updated last year
• hasherezade / pin_n_sieve
  An experimental dynamic malware unpacker based on Intel Pin and PE-sieve
  ☆63Updated last year
• airbus-cert / etwbreaker
  An IDA plugin to deal with Event Tracing for Windows (ETW)
  ☆55Updated 3 years ago
• jborean93 / PSDetour
  Windows Detour Hooking in PowerShell
  ☆80Updated last year
• hotnops / COM_Mapper
  A tool to create COM class/interface relationships in neo4j
  ☆50Updated 3 years ago
• trailofbits / WinDbg-JS
  ☆27Updated 2 years ago