Pinned Loading

1. WhacAMoleWhacAMolePublic

   Live memory analysis detecting malware IOCs in processes, modules, handles, tokens, threads, .NET assemblies, memory address space and environment variables. Dumps, detects and dissasemble hooks, s…

   C++ 45 4

2. mftfmftfPublic

   $MFT parser (from live systems or a copy of the $MFT) and raw file copy utility

   C# 38 7

3. regkevalregkevalPublic

   Malware detection in registry using a baseline

   Perl 3 1

4. WMIParserStrWMIParserStrPublic

   WMI OBJECTS.DATA parser

   C# 1 1

5. RC4_Encrypt-DecryptRC4_Encrypt-DecryptPublic

   RC4 encryption and decryption tool (c#)

   C#

6. Advanced-Process-Injection-WorkshopAdvanced-Process-Injection-WorkshopPublic

   Forked from RedTeamOperations/Advanced-Process-Injection-Workshop

   C++