├── AVQuery.cna ├── All_In_One.cna ├── ArtifactPayloadGenerator.cna ├── CertUtilWebDelivery.cna ├── DriverSearcher ├── DriverSearcher │ ├── EDRQuery.csproj │ ├── Program.cs │ └── Properties │ │ └── AssemblyInfo.cs └── EDRQuery.sln ├── EDR.cna ├── Logging ├── Logger.cna ├── README.md ├── av_hips_executables.txt └── logs.py ├── Persistence ├── Bitsadmin.cna ├── HKCURunKeyPSRegistryPersist.cna ├── HKLMRunKeyPSRegistryPersist.cna ├── Persistence_Menu.cna ├── README.md ├── RegistryPersist.cna ├── ServiceEXEPersist.cna ├── StartUpFolderPersist.cna ├── StartupGPOPersist.cna ├── UserSchtasksPersist.cna ├── WMICEventPersist.cna └── WMIEventPersist.cna ├── ProcessColor.cna ├── ProcessMonitor.cna ├── ProcessMonitor.ps1 ├── README.md ├── RedTeamRepo.cna ├── SMBPayloadGenerator.cna └── logvis.cna /AVQuery.cna: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/harleyQu1nn/AggressorScripts/HEAD/AVQuery.cna -------------------------------------------------------------------------------- /All_In_One.cna: -------------------------------------------------------------------------------- 1 | Remaking this completely. Keep an eye out for a version 2 release :) 2 | -------------------------------------------------------------------------------- /ArtifactPayloadGenerator.cna: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/harleyQu1nn/AggressorScripts/HEAD/ArtifactPayloadGenerator.cna -------------------------------------------------------------------------------- /CertUtilWebDelivery.cna: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/harleyQu1nn/AggressorScripts/HEAD/CertUtilWebDelivery.cna -------------------------------------------------------------------------------- /DriverSearcher/DriverSearcher/EDRQuery.csproj: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/harleyQu1nn/AggressorScripts/HEAD/DriverSearcher/DriverSearcher/EDRQuery.csproj -------------------------------------------------------------------------------- /DriverSearcher/DriverSearcher/Program.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/harleyQu1nn/AggressorScripts/HEAD/DriverSearcher/DriverSearcher/Program.cs -------------------------------------------------------------------------------- /DriverSearcher/DriverSearcher/Properties/AssemblyInfo.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/harleyQu1nn/AggressorScripts/HEAD/DriverSearcher/DriverSearcher/Properties/AssemblyInfo.cs -------------------------------------------------------------------------------- /DriverSearcher/EDRQuery.sln: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/harleyQu1nn/AggressorScripts/HEAD/DriverSearcher/EDRQuery.sln -------------------------------------------------------------------------------- /EDR.cna: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/harleyQu1nn/AggressorScripts/HEAD/EDR.cna -------------------------------------------------------------------------------- /Logging/Logger.cna: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/harleyQu1nn/AggressorScripts/HEAD/Logging/Logger.cna -------------------------------------------------------------------------------- /Logging/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/harleyQu1nn/AggressorScripts/HEAD/Logging/README.md -------------------------------------------------------------------------------- /Logging/av_hips_executables.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/harleyQu1nn/AggressorScripts/HEAD/Logging/av_hips_executables.txt -------------------------------------------------------------------------------- /Logging/logs.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/harleyQu1nn/AggressorScripts/HEAD/Logging/logs.py -------------------------------------------------------------------------------- /Persistence/Bitsadmin.cna: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/harleyQu1nn/AggressorScripts/HEAD/Persistence/Bitsadmin.cna -------------------------------------------------------------------------------- /Persistence/HKCURunKeyPSRegistryPersist.cna: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/harleyQu1nn/AggressorScripts/HEAD/Persistence/HKCURunKeyPSRegistryPersist.cna -------------------------------------------------------------------------------- /Persistence/HKLMRunKeyPSRegistryPersist.cna: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/harleyQu1nn/AggressorScripts/HEAD/Persistence/HKLMRunKeyPSRegistryPersist.cna -------------------------------------------------------------------------------- /Persistence/Persistence_Menu.cna: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/harleyQu1nn/AggressorScripts/HEAD/Persistence/Persistence_Menu.cna -------------------------------------------------------------------------------- /Persistence/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/harleyQu1nn/AggressorScripts/HEAD/Persistence/README.md -------------------------------------------------------------------------------- /Persistence/RegistryPersist.cna: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/harleyQu1nn/AggressorScripts/HEAD/Persistence/RegistryPersist.cna -------------------------------------------------------------------------------- /Persistence/ServiceEXEPersist.cna: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/harleyQu1nn/AggressorScripts/HEAD/Persistence/ServiceEXEPersist.cna -------------------------------------------------------------------------------- /Persistence/StartUpFolderPersist.cna: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/harleyQu1nn/AggressorScripts/HEAD/Persistence/StartUpFolderPersist.cna -------------------------------------------------------------------------------- /Persistence/StartupGPOPersist.cna: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/harleyQu1nn/AggressorScripts/HEAD/Persistence/StartupGPOPersist.cna -------------------------------------------------------------------------------- /Persistence/UserSchtasksPersist.cna: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/harleyQu1nn/AggressorScripts/HEAD/Persistence/UserSchtasksPersist.cna -------------------------------------------------------------------------------- /Persistence/WMICEventPersist.cna: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/harleyQu1nn/AggressorScripts/HEAD/Persistence/WMICEventPersist.cna -------------------------------------------------------------------------------- /Persistence/WMIEventPersist.cna: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/harleyQu1nn/AggressorScripts/HEAD/Persistence/WMIEventPersist.cna -------------------------------------------------------------------------------- /ProcessColor.cna: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/harleyQu1nn/AggressorScripts/HEAD/ProcessColor.cna -------------------------------------------------------------------------------- /ProcessMonitor.cna: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/harleyQu1nn/AggressorScripts/HEAD/ProcessMonitor.cna -------------------------------------------------------------------------------- /ProcessMonitor.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/harleyQu1nn/AggressorScripts/HEAD/ProcessMonitor.ps1 -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/harleyQu1nn/AggressorScripts/HEAD/README.md -------------------------------------------------------------------------------- /RedTeamRepo.cna: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/harleyQu1nn/AggressorScripts/HEAD/RedTeamRepo.cna -------------------------------------------------------------------------------- /SMBPayloadGenerator.cna: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/harleyQu1nn/AggressorScripts/HEAD/SMBPayloadGenerator.cna -------------------------------------------------------------------------------- /logvis.cna: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/harleyQu1nn/AggressorScripts/HEAD/logvis.cna --------------------------------------------------------------------------------