DefenderCheck vs Shhmon

DefenderCheck

Identifies the bytes that Microsoft Defender flags on. (by matterpreter)

Source Code

Suggest alternative

Edit details

Shhmon

Neutering Sysmon via driver unload (by matterpreter)

C# Sysmon evasion

Source Code

Suggest alternative

Edit details

InfluxDB - Power Real-Time Data Analytics at Scale

Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

www.influxdata.com

featured

SaaSHub - Software Alternatives and Reviews

SaaSHub helps you find the best software and product alternatives

www.saashub.com

featured

DefenderCheck		Shhmon
	Project
3	Mentions	1
2,130	Stars	216
-	Growth	-
2.5	Activity	0.0
8 months ago	Latest Commit	over 1 year ago
C#	Language	C#
BSD 3-clause "New" or "Revised" License	License	BSD 3-clause "New" or "Revised" License

The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.

DefenderCheck

Posts with mentions or reviews of DefenderCheck. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2021-09-24.

DefenderCheck - Identifies the bytes that Microsoft Defender flags on.
1 project | /r/CKsTechNews | 4 Oct 2022
DefenderCheck: Identifies the bytes that Microsoft Defender flags on
1 project | news.ycombinator.com | 4 Oct 2022
Anyone else having trouble bypassing Defender since yesterday?
3 projects | /r/redteamsec | 24 Sep 2021

Try using Defendercheck to see what the offending bytes are. Also, have you tried any AMSI bypasses?

Shhmon

Posts with mentions or reviews of Shhmon. We have used some of these posts to build our list of alternatives and similar projects.

Shhmon - Neuter Sysmon by unloading its driver
1 project | /r/purpleteamsec | 23 Dec 2020

What are some alternatives?

When comparing DefenderCheck and Shhmon you can also consider the following projects:

ThreatCheck - Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.

Roslyn - The Roslyn .NET compiler provides C# and Visual Basic languages with rich code analysis APIs.

mortar - evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)

WaveFunctionCollapse - Bitmap & tilemap generation from a single example with the help of ideas from quantum mechanics

awesome-dotnet-core - :honeybee: A collection of awesome .NET core libraries, tools, frameworks and software

AntiCrack-DotNet - C# Project contains a plenty of Advanced Anti-Debugging, Anti-Virtualization, Anti Dll-Injection and Anti-Hooking Techniques.

SysmonConfigPusher - Pushes Sysmon Configs

Chimera - Chimera is a PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.

ShareX - ShareX is a free and open source program that lets you capture or record any area of your screen and share it with a single press of a key. It also allows uploading images, text or other types of files to many supported destinations you can choose from.

Avalonia - Develop Desktop, Embedded, Mobile and WebAssembly apps with C# and XAML. The most popular .NET UI client technology