
ALPC-Enumerator
A Windows userland tool to enumerate and classify ALPC ports, including PPL-protected processes.
digital-forensicsinformation-gatheringmalware-analysis+4
26

A Windows userland tool to enumerate and classify ALPC ports, including PPL-protected processes.

Windows kernel driver that removes Process Protection (PP) and Process Protection Light (PPL).

Lightweight RAT providing silent remote command-line access, hidden file download/execution, and persistence mechanisms for Windows systems.…