zacbrown/PowerShellMethodAuditor zacbrown/PowerShellMethodAuditor

  • Stars
    star
    39
  • Rank 680,887 (Top 14 %)
  • Language
    C#
  • License
    MIT License
  • Created over 7 years ago
  • Updated almost 7 years ago
Twitter logo Share LinkedIn logo Share Facebook logo Share
zacbrown/PowerShellMethodAuditor
github

zacbrown

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

PowerShellMethodAuditor listens to the PowerShell ETW provider and logs PowerShell method invocations.

More Repositories

1

PowerKrabsEtw

PowerKrabsEtw is a PowerShell interface for doing real-time ETW tracing.
C#
103
star
2

hiddentreasure-etw-demo

Basic demo for Hidden Treasure talk.
C#
49
star
3

simplevm

Simple virtual machine for teaching basic concepts of virtual machine implementation.
C++
28
star
4

flatkrabsetw

flatkrabsetw is a flat-C wrapper around the krabsetw C++ library. It's primarily meant for FFI usage in other languages.
C++
11
star
5

configs

Zac's assorted config files
Emacs Lisp
10
star
6

osquery-rs

Rust bindings for osquery
6
star
7

throf

A simple concatenative programming language influenced by Forth, Factor, and PostScript.
C++
4
star
8

samples

Various samples used in my blog posts.
C++
1
star
9

EtwDotNetLoadMonitor

Detect when core .NET dll's are loaded into processes.
C#
1
star