bigbrobro Goto Github PK

syscallhide

Create a Run registry key with direct system calls. Inspired by @Cneelis's Dumpert and SharpHide.

sysevr

sysmon

A collection of useful PowerShell tools to collect, organize, and visualize Sysmon event data

sysmon-arangodb

Threat hunting with Sysmon and ArangoDB Graphs

sysmon-auto-install

Install and auto update scripts for sysmon and winlogbeat

sysmon-configs

Various complete configs

sysmon-dfir

Sources, configuration and how to detect evil things utilizing Microsoft Sysmon.

sysmon-extract

Extract logs based off events from sysmon. Comes as a package, cli and ui.

sysmon-modular

A repository of sysmon configuration modules

sysmon2neo4j

sysmoncommunityguide

TrustedSec Sysinternals Sysmon Community Guide

sysmonforlinux

sysmonhunter

An easy ATT&CK-based Sysmon hunting tool, showing in Blackhat USA 2019 Arsenal

sysmonquiet

RDLL for Cobalt Strike beacon to silence sysmon process

sysmonrnn

All necessary code in order to feed Sysmon data into Recurrent Neural Network

sysmonsearch

Investigate suspicious activity by visualizing Sysmon's event log

sysmontools

Utilities for Sysmon

sysmonx

SysmonX - An Augmented Drop-In Replacement of Sysmon

syspce

System Processes Correlation Engine

systemexplorer

Windows System Explorer

systemtoken

Steal privileged token to obtain SYSTEM shell

systracingpoc

CVE-2020-0668 - Microsoft Windows Service Tracing Arbitrary File Move Local Privilege Escalation Vulnerability

syswhispers

AV/EDR evasion via direct system calls.

syswhispers2

AV/EDR evasion via direct system calls.

szt-bigdata

深圳地铁大数据客流分析系统🚇🚄🌟

talks

talon

A password guessing tool that targets the Kerberos and LDAP services within the Windows Active Directory environment.

taowu-cobalt-strike

tau-engine

A document tagging library

teamviewer-alterid

TeamViewer-重置ID无限制使用