Skip to content

Instantly share code, notes, and snippets.

View mavjs's full-sized avatar
🎯
Hunting!!!111oneoneone

Maverick mavjs

🎯
Hunting!!!111oneoneone
22 followers · 1 following
View GitHub Profile
@mavjs
mavjs / Sysmon_Lab.ps1
Created March 16, 2023 18:28 — forked from Purp1eW0lf/Sysmon_Lab.ps1
<#
Meta
Date: 2022 March 28th
Authors: Dray Agha (Twitter @purp1ew0lf)
Company: Huntress Labs
Purpose: Automate setting up Sysmon and pulling Ippsec's sysmon IoC streamliner. Great for malware lab.
#>
function admin_check{
if (-NOT ([Security.Principal.WindowsPrincipal] [Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole(`
@mavjs
mavjs / PowerShell Script Block Merge in Kusto
Created March 25, 2022 22:38 — forked from LeeHolmes/PowerShell Script Block Merge in Kusto
Event
| where EventID == "4104"
| extend ParsedEvent = parse_xml(strcat("<root>", ParameterXml, "</root>"))
| extend MessageNumber = tolong(ParsedEvent.root.Param[0])
| extend MessageTotal = tolong(ParsedEvent.root.Param[1])
| extend ScriptBlockElement = iff(
strlen(tostring(ParsedEvent.root.Param[2]["#text"])) > 0,
ParsedEvent.root.Param[2]["#text"],
ParsedEvent.root.Param[2])
| extend ScriptBlockId = tostring(ParsedEvent.root.Param[3])
@mavjs
mavjs / AWS API calls that return credentials.md
Created February 20, 2021 12:05 — forked from kmcquade/AWS API calls that return credentials.md
AWS API calls that return credentials
@mavjs
mavjs / gzip_str.py
Created April 25, 2020 21:31 — forked from Garrett-R/gzip_str.py
Demo of how to gzip and gunzip a string in Python 3
import gzip
import io
def gzip_str(string_):
out = io.BytesIO()
with gzip.GzipFile(fileobj=out, mode='w') as fo:
fo.write(string_.encode())
bytes_obj = out.getvalue()