Pinned

1. WhacAMole WhacAMole Public

   Live memory analysis detecting malware IOCs in processes, modules, handles, tokens, threads, .NET assemblies, memory address space and environment variables. Dumps, detects and dissasemble hooks, s…

   C++ 26 4

2. mftf mftf Public

   $MFT parser (from live systems or a copy of the $MFT) and raw file copy utility

   C# 37 7

3. regkeval regkeval Public

   Malware detection in registry using a baseline

   Perl 2 1

4. WMIParserStr WMIParserStr Public

   WMI OBJECTS.DATA parser

   C# 1 1

5. RC4_Encrypt-Decrypt RC4_Encrypt-Decrypt Public

   RC4 encryption and decryption tool (c#)

   C#

6. Advanced-Process-Injection-Workshop Advanced-Process-Injection-Workshop Public

   Forked from RedTeamOperations/Advanced-Process-Injection-Workshop

   C++