Procscan is a quick and dirty python script used to look for potentially dangerous api call patterns in a Procmon PML file.

Last update: Sep 02, 2022

Related tags

Overview

PROCSCAN

Procscan is a quick and dirty python script used to look for potentially dangerous api call patterns in a Procmon PML file.

Installation

git clone https://github.com/bananabr/procscan.git
cd procscan
python3 -m pip install -r requirements.txt

Usage

usage: procscan.py [-h] [--log LOG] [--verbose] --pml PML --ac AC

optional arguments:
  -h, --help     show this help message and exit
  --log LOG      log file path
  --verbose, -v  increase verbosity
  --pml PML      procscan PML file
  --ac AC        accesschk output file

Todo

(Registry symbolic link patterns)
(Filesystem symbolic link patterns)
(DLL hijack)
(Writable DLL loaded by privileged process)
(Writable PE loaded by privileged process)

Owner

Daniel Santos

GitHub Repository

A webapp for taking fast notes, designed for business, school, and collaboration with groups.

JOTS Journal of the Session A webapp for taking fast notes, designed for business, school, and collaboration with groups.

2 Jun 10, 2022

Quanser Labs Robotic Arm With Python

Quanser-Labs-Robotic-Arm As a team, we programmed a Robotic-Arm in Python on the

1 Jul 11, 2022

ARRU seismic backprojection - Earthquake waveform detection and P/S arrivals picking on continuous data using ARRU phase picker

ARRU_seismic_backprojection Earthquake waveform detection and P/S arrivals picki

8 Nov 04, 2022

How to create the game Rock, Paper, Scissors in Python

Rock, Paper, Scissors! If you want to learn how to do interactive games using Python, then this is great start for you. In this code, You will learn h

1 Dec 18, 2021

To check my COVID-19 vaccine appointment, I wrote an infinite loop that sends me a Whatsapp message hourly using Twilio and Selenium. It works on my Raspberry Pi computer.

COVID-19_vaccine_appointment To check my COVID-19 vaccine appointment, I wrote an infinite loop that sends me a Whatsapp message hourly using Twilio a

24 Dec 17, 2022

Procscan is a quick and dirty python script used to look for potentially dangerous api call patterns in a Procmon PML file.

Related tags

Overview

PROCSCAN

Installation

Usage

Todo

Owner

Daniel Santos

A webapp for taking fast notes, designed for business, school, and collaboration with groups.

Quanser Labs Robotic Arm With Python

ARRU seismic backprojection - Earthquake waveform detection and P/S arrivals picking on continuous data using ARRU phase picker

How to create the game Rock, Paper, Scissors in Python

To check my COVID-19 vaccine appointment, I wrote an infinite loop that sends me a Whatsapp message hourly using Twilio and Selenium. It works on my Raspberry Pi computer.

Forward RSS feeds to your email address, community maintained

About A python based Apple Quicktime protocol，you can record audio and video from real iOS devices

🦠 A simple and fast (< 200ms) API for tracking the global coronavirus (COVID-19, SARS-CoV-2) outbreak.

TMTC Commander Core

msgqywx 使用企业微信的应用消息推送实时信息

A way to write regex with objects instead of strings.

Vita Specific Patches and Application for Doki Doki Literature Club (Steam Version) using Ren'Py PSVita

Integer sets where all subsets have unique sums

fetchmesh is a tool to simplify working with Atlas anchoring mesh measurements

This is a simple bank management system based on Python.

An html wrapper for python

Experimental Brawl Stars v36.218 server emulator written in Python.

i3wm helper tool for workspaces on multiple monitors

Absolute solvation free energy calculations with OpenFF and OpenMM

Rufus port to linux, writed on Python3