Procscan is a quick and dirty python script used to look for potentially dangerous api call patterns in a Procmon PML file.

Last update: Sep 02, 2022

Related tags

Overview

PROCSCAN

Procscan is a quick and dirty python script used to look for potentially dangerous api call patterns in a Procmon PML file.

Installation

git clone https://github.com/bananabr/procscan.git
cd procscan
python3 -m pip install -r requirements.txt

Usage

usage: procscan.py [-h] [--log LOG] [--verbose] --pml PML --ac AC

optional arguments:
  -h, --help     show this help message and exit
  --log LOG      log file path
  --verbose, -v  increase verbosity
  --pml PML      procscan PML file
  --ac AC        accesschk output file

Todo

(Registry symbolic link patterns)
(Filesystem symbolic link patterns)
(DLL hijack)
(Writable DLL loaded by privileged process)
(Writable PE loaded by privileged process)

Owner

Daniel Santos

GitHub Repository

Create VSCode Extensions with python

About Create vscode extensions with python. Installation Stable version: pip install vscode-ext Why use this? Why should you use this for building VSc

134 Jan 07, 2023

Simple, high-school-leveled sequence library written in Python / 간단한 고등학교 수준 수열 라이브러리 (Python)

Simple, high-school-leveled sequence library written in Python

1 Dec 08, 2021

This is a simple bank management system based on Python.

Python Bank Management This is a simple bank management system based on Python. It's able to do basic operations of simple bank management. Outcome: W

3 Jan 06, 2022

A simple script for generating screenshots with Vapoursynth

Vapoursynth-Screenshots A simple script for generating screenshots with Vapoursynth. About I'm lazy, and hate changing variables for each batch of scr

7 Dec 31, 2022

A small scale relica of bank management system using the MySQL queries in the python language.

Bank_Management_system This is a Bank Management System Database Project. Abstract: The main aim of the Bank Management Mini project is to keep record

1 Jan 27, 2022

An extended, game oriented, turtle

Burtle A Better TURTLE. Makes making games easier. write less do more!! Documentation & guide: https://alannxq.github.io/burtle/ Installation pip inst

5 May 19, 2022

Create a program for generator Truth Table

Python-Truth-Table-Ver-1.0 Create a program for generator Truth Table in here you have to install truth-table-generator module for python modules inst

10 Jul 13, 2022

Gerador de dafaces

🎴 DefaceGenerator Obs: esse script foi criado com a intenção de ajudar pessoas iniciantes no hacking que ainda não conseguem criar suas próprias defa

3 Jan 09, 2022

decorator

Decorators for Humans The goal of the decorator module is to make it easy to define signature-preserving function decorators and decorator factories.

734 Dec 30, 2022

Singularity Containers on Apple M1 (ARM64)

Singularity Containers on Apple M1 (ARM64) This is a repository containing a ready-to-use environment for singularity in arm64 (M1). It has been prepa

4 Nov 14, 2022

💡 Fully automatic light management based on conditions like motion, illuminance, humidity, and other clever features

Fully automatic light management based on motion as AppDaemon app. 🕓 multiple daytimes to define different scenes for morning, noon, ... 💡 supports

105 Dec 23, 2022

A small C compiler written in Python for learning purposes

A small C compiler written in Python. Generates x64 Intel-format assembly, which is then assembled and linked by nasm and ld.

3 Oct 22, 2021

Free components that wrap up Python into Delphi and Lazarus (FPC)

Python for Delphi (P4D) is a set of free components that wrap up the Python DLL into Delphi and Lazarus (FPC). They let you easily execute Python scri

747 Jan 02, 2023

A pairs trade is a market neutral trading strategy enabling traders to profit from virtually any market conditions.

A pairs trade is a market neutral trading strategy enabling traders to profit from virtually any market conditions. This strategy is categorized as a statistical arbitrage and convergence trading str

13 Nov 27, 2022

A flexible free and unlimited python tool to translate between different languages in a simple way using multiple translators.

deep-translator Translation for humans A flexible FREE and UNLIMITED tool to translate between different languages in a simple way using multiple tran

806 Jan 04, 2023

Procscan is a quick and dirty python script used to look for potentially dangerous api call patterns in a Procmon PML file.

Related tags

Overview

PROCSCAN

Installation

Usage

Todo

Owner

Daniel Santos

Create VSCode Extensions with python

Simple, high-school-leveled sequence library written in Python / 간단한 고등학교 수준 수열 라이브러리 (Python)

This is a simple bank management system based on Python.

A simple script for generating screenshots with Vapoursynth

A small scale relica of bank management system using the MySQL queries in the python language.

An extended, game oriented, turtle

Create a program for generator Truth Table

Gerador de dafaces

decorator

Singularity Containers on Apple M1 (ARM64)

💡 Fully automatic light management based on conditions like motion, illuminance, humidity, and other clever features

A small C compiler written in Python for learning purposes

Free components that wrap up Python into Delphi and Lazarus (FPC)

A pairs trade is a market neutral trading strategy enabling traders to profit from virtually any market conditions.

A flexible free and unlimited python tool to translate between different languages in a simple way using multiple translators.

Syarat.ID Source Code - Syarat.ID is a content aggregator website

Template (v0) do Sistema Chatbot - atividade síncrona - INE5404

A community based economy bot with python works only with python 3.7.8 as web3 requires cytoolz

A simple, light-weight and highly maintainable online judge system for secondary education

NGEBUG is a tool that sends viruses to victims