by netero1010 · 未分类 · ★ 1.8k
EDRSilencer Inspired by the closed source FireBlock tool FireBlock from MdSec NightHawk, I decided to create my own version and this tool was created with the aim of blocking the outbound traffic of running EDR processes using Windows Filtering Platform (WFP) APIs. This tool offers the following features: Search known running EDR processes and add WFP filter to block its outbound traffic Add WFP filter for a specific process Remove all WFP filters created by this tool Remove a specific WFP filter by filter id Support to run in C2 with in-memory PE execution module (e.g., ) Some EDR controls...
| Stars | 1,825 |
| Forks | 237 |
| Language | C |
| Category | 未分类 |
| License | MIT |
| Quality Score | 30.75/100 |
| Open Issues | 8 |
| Last Updated | 2024-11-03 |
| Created | 2023-12-26 |
| Est. Tokens | ~11k |
Explore other popular 未分类 tools:
EDRSilencer is A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the server.. It is categorized as a 未分类 with 1.8k GitHub stars.
EDRSilencer is primarily written in C.
You can find installation instructions and usage details in the EDRSilencer GitHub repository at github.com/netero1010/EDRSilencer. The project has 1.8k stars and 237 forks, indicating an active community.
EDRSilencer is released under the MIT license, making it free to use and modify according to the license terms.