John U (@jdu2600)
github

jdu2600

Twitter logo Share LinkedIn logo Share Facebook logo Share
  • Stars
    star
    506
  • Global Rank 56,901 (Top 2 %)
  • Followers 93
  • Registered about 5 years ago
  • Most used languages
    C#
         42.9 %
    C++
         28.6 %
    Java
         14.3 %
    PowerShell
         14.3 %
  • Location 🇦🇺 Australia
  • Country Total Rank 1,390
  • Country Ranking
    PowerShell
         76
    C#
         96
    C++
         119
    Java
         732

Top repositories

1

Windows10EtwEvents

Events from all manifest-based and mof-based ETW providers across Windows 10 versions
C#
259
star
2

CFG-FindHiddenShellcode

Walks the CFG bitmap to find previously executable but currently hidden shellcode regions
C++
91
star
3

EtwTi-FluctuationMonitor

Uses Threat-Intelligence ETW events to identify shellcode regions being hidden by fluctuating memory protections
C++
87
star
4

Etw-SyscallMonitor

Monitors ETW for security relevant syscalls maintaining the set called by each unique process
C#
40
star
5

Get-InjectedThreadEx

Fork of Get-InjectedThread - https://gist.github.com/jaredcatkinson/23905d34537ce4b5b1818c3e6405c1d2
PowerShell
22
star
6

API-To-ETW

Uses ghidra to find all ETW write metadata for each API in a PE file
Java
9
star
7

RpcRegistrationMonitor

C#
2
star