Automated Tactics Techniques & Procedures

Complete environement for network injected reversing

安全卫士项目

This project demonstares an illegal read- and write- access to the kernel-mode data for both allocated by 3rd party drivers and EPROCESS structures

Sends and injects pointer input between computers using the WinAPI

Robber is open source tool for finding executables prone to DLL hijacking

check_IP is to judge whether a IP is malicious based on open threat intelligence，基于开源威胁情报AlienVault，排查IP地址及域名的恶意性

Investigate malicious Windows logon by visualizing and analyzing Windows event log