 yardenshafir
|
7ab7d64a07
|
Create EtwConsumersForProcesses
|
2023-04-09 12:41:29 -04:00 |
|
|
yardenshafir
|
1804d79cb9
|
Create EtwAllRegisteredTraceGuids
|
2023-04-09 12:11:47 -04:00 |
|
|
yardenshafir
|
e2c7c76600
|
Rename EtwPrintRegisteredProvidersForGuid.txt to EtwPrintRegisteredProvidersForNotificationGuid.txt
|
2023-04-09 12:11:39 -04:00 |
|
|
yardenshafir
|
a1d7b3a738
|
Create EtwRegisteredProvidersForProcess
|
2023-04-09 11:57:56 -04:00 |
|
|
yardenshafir
|
1e1c74cb3c
|
Fix missing variable
|
2023-04-09 11:46:46 -04:00 |
|
|
yardenshafir
|
50db3f6657
|
Create TokenTrustLevel
|
2023-02-21 15:17:31 -05:00 |
|
|
yardenshafir
|
2be3dccd72
|
Tabs to spaces
|
2023-01-16 14:43:33 -05:00 |
|
|
yardenshafir
|
009472acf2
|
Delete GetFilterConnectionPorts
Reorg - command was moved to another file containing other filter comm ports commands
|
2023-01-16 14:38:29 -05:00 |
|
|
yardenshafir
|
43440551cc
|
Update FilterCommsHelpers.txt
Move command from another file to this one
|
2023-01-16 14:37:55 -05:00 |
|
|
yardenshafir
|
e3b0ab3cb8
|
Create FilterCommsHelpers.txt
Helper functions for filter communication port operations
|
2023-01-16 14:36:02 -05:00 |
|
|
yardenshafir
|
8d1c5009f7
|
Add Filter Comm Ports JS script
JS script with helper functions to enumerate and get information for filter drivers and their registered communication ports.
|
2023-01-16 14:26:07 -05:00 |
|
|
yardenshafir
|
bf3a316abe
|
Update README.md
|
2022-10-27 13:24:37 -04:00 |
|
|
yardenshafir
|
6ab5b6a9d0
|
Update README.md
|
2022-10-26 23:09:20 -04:00 |
|
|
yardenshafir
|
610e748085
|
Create threadNames
|
2022-10-26 22:56:09 -04:00 |
|
|
yardenshafir
|
bf51200506
|
Create GetFilterConnectionPorts
|
2022-10-02 10:20:14 -04:00 |
|
|
yardenshafir
|
17c2d8971c
|
Create GroupProcsBySecurityDomain
|
2022-10-01 08:52:06 -04:00 |
|
|
yardenshafir
|
8cf49f080e
|
Create wow64_peb
|
2022-08-06 12:59:13 -04:00 |
|
|
yardenshafir
|
450f4eca9f
|
Create halDispatchTableWithSymbol
|
2022-07-19 16:10:41 -04:00 |
|
|
yardenshafir
|
b4bdbf9c1a
|
Create alpcPortsForProcesses.txt
Add 2 options to print all ALPC ports that all processes have open handles to
|
2022-05-25 10:07:01 -04:00 |
|
|
yardenshafir
|
c4b7a83938
|
Create appcontainers.txt
Print all processes running as appcontainers
|
2022-05-25 09:49:21 -04:00 |
|
|
yardenshafir
|
2fc6624795
|
Create processRedirectionTrust.txt
Add command to dump processes whose tokens enable redirection trust mitigation
|
2022-05-25 09:46:48 -04:00 |
|
|
yardenshafir
|
0bb41bc95f
|
Update processNotifyRoutinesSymbols
|
2022-04-12 13:24:57 -04:00 |
|
|
yardenshafir
|
ce0ccfc1b6
|
Create processNotifyRoutinesSymbols
|
2022-04-12 13:22:41 -04:00 |
|
|
yardenshafir
|
1ebd8efcae
|
Rename getProcessNotifyRoutines.txt to getProcessNotifyRoutinesWithSyntheticTypes.txt
|
2022-04-12 13:19:39 -04:00 |
|
|
yardenshafir
|
ed9ff49c92
|
Create FindNonSystem32Modules.txt
|
2021-04-08 18:20:46 +03:00 |
|
|
Yarden Shafir
|
dda842b23e
|
Add scripts to print etw provider information
|
2020-11-24 18:28:01 +02:00 |
|
|
Yarden Shafir
|
d5496cd067
|
Add commands to dump wait blocks
|
2020-11-11 12:15:12 +02:00 |
|
|
Yarden Shafir
|
377a405c85
|
Commands from opcde keynote
|
2020-06-03 19:57:59 +03:00 |
|
|
Yarden Shafir
|
039f30359c
|
Merge branch 'master' of https://github.com/yardenshafir/WinDbg_Scripts
|
2020-06-03 17:26:25 +03:00 |
|
|
Yarden Shafir
|
b7ef5e2c15
|
Update pdf - hope it's not corrupted this time
|
2020-06-03 17:26:03 +03:00 |
|
|
yardenshafir
|
11b48a0989
|
Update README.md
|
2020-05-23 01:58:47 -07:00 |
|
|
yardenshafir
|
1f91beaedc
|
Create README.md
|
2020-05-23 01:58:26 -07:00 |
|
|
Yarden Shafir
|
ba8b1c5cf3
|
Add writeup
|
2020-05-23 01:06:26 +03:00 |
|
|
Yarden Shafir
|
0bc67f8ac7
|
Scripts
|
2020-05-22 18:17:52 +03:00 |
|