Discover @jdu2600 Open Source projects

John U (@jdu2600)

jdu2600

Stars
548
Global Rank 53,323 (Top 2 %)
Followers 98
Registered over 5 years ago
Most used languages

C++
37.5 %

C#
37.5 %

Java
12.5 %

PowerShell
12.5 %
Location 🇦🇺 Australia
Country Total Rank 1,390
Country Ranking

PowerShell
69

C#
95

C++
110

Java
667

Windows10EtwEvents

Events from all manifest-based and mof-based ETW providers across Windows 10 versions

CFG-FindHiddenShellcode

Walks the CFG bitmap to find previously executable but currently hidden shellcode regions

EtwTi-FluctuationMonitor

Uses Threat-Intelligence ETW events to identify shellcode regions being hidden by fluctuating memory protections

Etw-SyscallMonitor

Monitors ETW for security relevant syscalls maintaining the set called by each unique process

Get-InjectedThreadEx

Fork of Get-InjectedThread - https://gist.github.com/jaredcatkinson/23905d34537ce4b5b1818c3e6405c1d2

API-To-ETW

Uses ghidra to find all ETW write metadata for each API in a PE file

ETW-PPL-Tester

Consume Threat-Intelligence ETW using krabsetw and BYOVD

RpcRegistrationMonitor