Pinned Loading

1. HookDetector HookDetector Public

   HookDetector identifies DLL-imported functions that have been hooked in its own process.

   C 1

2. EnableParentPriv EnableParentPriv Public

   Enables the requested privilege in its parent process: the shell calling it

   C

3. regdiff.py regdiff.py Public

   regdiff.py diffs two registry hives

   Python

4. ToyEDR ToyEDR Public

   C

5. Get-ModifiablePathFromProcmon Get-ModifiablePathFromProcmon Public

   A simple PowerShell function parsing a Procmon CSV output to extract accessed filesystem and registry paths and using @itm4n's PrivescCheck's functions `Get-ModifiablePath` and `Get-ModifiableRegis…

   PowerShell 1