
AMSI-ETW-Patch
Patch AMSI and ETW
adversarial-attackids-ips-evasionpost-exploitation+1
251

Patch AMSI and ETW

A tool to find folders excluded from AV real-time scanning using a time oracle

Detect EDR's exceptions by inspecting processes' loaded modules

Leak NTLM via Website tab in teams via MS Office


I Know Where Your Page Lives: Derandomizing the latest Windows 10 Kernel - ZeroNights 2016

Purple-team telemetry & simulation toolkit.

An information security preparedness tool to do adversarial simulation.