Procscan is a quick and dirty python script used to look for potentially dangerous api call patterns in a Procmon PML file.

Last update: Sep 02, 2022

Related tags

Overview

PROCSCAN

Procscan is a quick and dirty python script used to look for potentially dangerous api call patterns in a Procmon PML file.

Installation

git clone https://github.com/bananabr/procscan.git
cd procscan
python3 -m pip install -r requirements.txt

Usage

usage: procscan.py [-h] [--log LOG] [--verbose] --pml PML --ac AC

optional arguments:
  -h, --help     show this help message and exit
  --log LOG      log file path
  --verbose, -v  increase verbosity
  --pml PML      procscan PML file
  --ac AC        accesschk output file

Todo

(Registry symbolic link patterns)
(Filesystem symbolic link patterns)
(DLL hijack)
(Writable DLL loaded by privileged process)
(Writable PE loaded by privileged process)

Owner

Daniel Santos

GitHub Repository

It's a repo for Cramer's rule, which is some math crap or something idk

It's a repo for Cramer's rule, which is some math crap or something idk (just a joke, it's not crap; don't take that seriously, math teachers)

0 Aug 31, 2022

Brython (Browser Python) is an implementation of Python 3 running in the browser

brython Brython (Browser Python) is an implementation of Python 3 running in the browser, with an interface to the DOM elements and events. Here is a

5.9k Jan 02, 2023

Nateve transpiler developed with python.

Adam Adam is a Nateve Programming Language transpiler developed using Python. Nateve Nateve is a new general domain programming language open source i

7 Jan 15, 2022

Hartree-Fock Workshop for the Han-sur-Lesse Winterschool of 2021

Hartree-Fock course for the Han-sur-Lesse Winterschool of 2021 Requirements For going through these exercises, please install the Anaconda suite. Next

2 Nov 16, 2022

The program calculates the BMI of people

Programmieren Einleitung: Das Programm berechnet den BMI von Menschen. Es ist sehr einfach zu handhaben, so können alle Menschen ihren BMI berechnen.

2 Dec 16, 2021

Repositório contendo atividades no curso de desenvolvimento de sistemas no SENAI

SENAI-DES Este é um repositório contendo as atividades relacionadas ao curso de desenvolvimento de sistemas no SENAI. Se é a primeira vez em contato c

4 Dec 06, 2022

A python package for batch import of resume attachments to be parsed in HrFlow.

HrFlow Importer Description A python package for batch import of resume attachments to be parsed in HrFlow. hrflow-importer is an open-source project

3 Nov 15, 2022

msgqywx 使用企业微信的应用消息推送实时信息

8 Dec 18, 2022

⚡KiCad library containing footprints and symbols for inductive analog keyboard switches

Inductive Analog Switches This library contains footprints and symbols for inductive analog keyboard switches for use with the Texas Instruments LDC13

3 Jun 30, 2022

Takes output from RedLime's SpeedRunIGT mod (igt_timer.log) to get the top run retime as per the rules in speedrun.com/mc as well as generating a new file which is a copy of igt_timer.log which specifies what type of pause each one was.

top-run-time Takes output from RedLime's SpeedRunIGT mod (igt_timer.log) to get the top run retime as per the rules in speedrun.com/mc as well as gene

2 May 12, 2022

This simple script generates a backup of a given Python and R environment

Python Environment Backup It’s always good to maintain your Python and R Anaconda environment packages properly listed and well-kept in case you have

1 Jul 13, 2022

Pseudometa's dotfiles

pseudometa's dotfiles Table of Contents Why this repository? How this Repository works Special Explanations Got an idea for an improvement? Contact Wh

23 Dec 27, 2022

SimCSE在中文任务上的简单实验

SimCSE 中文测试 SimCSE在常见中文数据集上的测试，包含ATEC、BQ、LCQMC、PAWSX、STS-B共5个任务。介绍博客：https://kexue.fm/archives/8348 论文：《SimCSE: Simple Contrastive Learning of Sente

504 Jan 04, 2023

qecsim is a Python 3 package for simulating quantum error correction using stabilizer codes.

qecsim qecsim is a Python 3 package for simulating quantum error correction using stabilizer codes.

44 Dec 20, 2022

Odd-Or-Even - Ask the user for a number. Depending on whether the number is even or odd, print out an appropriate message to the user

Odd-Or-Even Ask the user for a number. Depending on whether the number is even o

0 Feb 07, 2022

Procscan is a quick and dirty python script used to look for potentially dangerous api call patterns in a Procmon PML file.

Related tags

Overview

PROCSCAN

Installation

Usage

Todo

Owner

Daniel Santos

It's a repo for Cramer's rule, which is some math crap or something idk

Brython (Browser Python) is an implementation of Python 3 running in the browser

Nateve transpiler developed with python.

Hartree-Fock Workshop for the Han-sur-Lesse Winterschool of 2021

The program calculates the BMI of people

Repositório contendo atividades no curso de desenvolvimento de sistemas no SENAI

A python package for batch import of resume attachments to be parsed in HrFlow.

msgqywx 使用企业微信的应用消息推送实时信息

⚡KiCad library containing footprints and symbols for inductive analog keyboard switches

Takes output from RedLime's SpeedRunIGT mod (igt_timer.log) to get the top run retime as per the rules in speedrun.com/mc as well as generating a new file which is a copy of igt_timer.log which specifies what type of pause each one was.

This simple script generates a backup of a given Python and R environment

Pseudometa's dotfiles

SimCSE在中文任务上的简单实验

qecsim is a Python 3 package for simulating quantum error correction using stabilizer codes.

Odd-Or-Even - Ask the user for a number. Depending on whether the number is even or odd, print out an appropriate message to the user

Learn Python tips, tools, and techniques in around 5 minutes each.

The fundamentals of Python!

Collection of script & resources for Foundry's Nuke software.

Sudo type me a payload

SymbLang are my programming language! Insired by the brainf**k.