jsecurity101/Detecting-Process-Injection-Techniques

Stars
33
Rank 783,877 (Top 16 %)
Language
Jupyter Notebook
Created about 5 years ago
Updated over 4 years ago

jsecurity101/Detecting-Process-Injection-Techniques

jsecurity101

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

This is a repository that is meant to hold detections for various process injection techniques.

MSRPC-to-ATTACK

A repository that maps commonly used attacks using MSRPC protocols to ATT&CK

TelemetrySource

Marvel-Lab

A collection of Powershell scripts that will help automate the build process for a Marvel domain.

JonMon

Windows-API-To-Sysmon-Events

A repository that maps API calls to Sysmon Event ID's.

PowerParse

PowerShell PE Parser

RandomPOCs

Repo that holds random POCs

LDAPMon

Automated-Detection-Pipeline

Jupyter Notebook

jsecurity101

Import-Marvel

Powershell script and CSV file that allows you to import marvel characters into Active Directory

ApacheGuacamole

Install Script for ApacheGuacamole

VulnerableService

Powershell script to create a vulnerable service, that can be easily used for privilege escalation

ProcCallback

An example of how a driver can register a handle creation callback.

Presentations

Python-Socket-Chat-room

Created a chat room in socket python

WinDbg-Scripts

Repository that holds WinDbg scripts that I have created to help with various tasks.

Python-Port-Scanner

Import-LOTR

Powershell script and CSV file that allows you to import characters from Lord of the Rings as Users, into Active Directory

IPC-Mechanisms