plioy-mwb Goto Github PK

ace

Ace (Ajax.org Cloud9 Editor)

advanced-process-injection-workshop

anti-ransomware-minifilter

A minifilter driver for detecting and blocking ransomware virus

antlr4buildtasks

Third-party build tool for 'Official' Antlr4 tool and runtime parsers using .Net. Drop-in replacement for 'Antlr4cs' Antlr4 tool and build rules.

antlrdt

Eclipse editor and builder for Antlr4 grammars

ast_explorer

astexplorer

A web tool to explore the ASTs generated by various parsers.

box-js

A tool for studying JavaScript malware.

caronte

Caronte, Windows filter driver for software behavior analysis.

clearscript

A library for adding scripting to .NET applications. Supports V8 (Windows, Linux, macOS) and JScript/VBScript (Windows).

conemu

Customizable Windows terminal with tabs, splits, quake-style, hotkeys and more

cuckoo

Cuckoo Sandbox is an automated dynamic malware analysis system

detect-it-easy

Program for determining types of files for Windows, Linux and MacOS.

detecting-adversarial-tradecrafts-tools-by-leveraging-etw

CyberWarFare Labs hands-on workshop on the topic "Detecting Adversarial Tradecrafts/Tools by leveraging ETW"

edr-preloader

An EDR bypass that prevents EDRs from hooking or loading DLLs into our process by hijacking the AppVerifier layer

edrs

etw

Event Tracing for Windows tools and samples

etw-dns

A simple example application to collect DNS queries logs using etw-api

etw-providers-docs

Document ETW providers

etw2json

Tool and library to convert ETW logs to JSON files

etwanalyzer

Command line tool to analyze one/many ETW file/s with simple queries for common issues.

etwexplorer

View ETW Provider manifest

etwhash

C# POC to extract NetNTLMv1/v2 hashes from ETW provider

etwnetmonv3

ETWNetMonv3 is simple C# code for Monitoring TCP Network Connection via ETW & ETWProcessMon/2 is for Monitoring Process/Thread/Memory/Imageloads/TCPIP via ETW + Detection for Remote-Thread-Injection & Payload Detection by VirtualMemAlloc Events (in-memory) etc.

etwprocessmon2

ETWProcessMon2 is for Monitoring Process/Thread/Memory/Imageloads/TCPIP via ETW + Detection for Remote-Thread-Injection & Payload Detection by VirtualMemAlloc Events (in-memory) etc.

etwrealtime

Example of real-time Windows ETW packet capture session

eventlogcrasher

evtx-etw-resources

Event Tracing For Windows (ETW) Resources

exiftool

ExifTool meta information reader/writer

flask

The Python micro framework for building web applications.