PipeViewer VS defcon27_csharp_workshop

What are some alternatives?

ETWProcessMon2 - ETWProcessMon2 is for Monitoring Process/Thread/Memory/Imageloads/TCPIP via ETW + Detection for Remote-Thread-Injection & Payload Detection by VirtualMemAlloc Events (in-memory) etc.

frostbyte - FrostByte is a POC project that combines different defense evasion techniques to build better redteam payloads

ImpulsiveDLLHijack - C# based tool which automates the process of discovering and exploiting DLL Hijacks in target binaries. The Hijacked paths discovered can later be weaponized during Red Team Operations to evade EDR's.

PoshC2 - A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.

KRBUACBypass - UAC Bypass By Abusing Kerberos Tickets

LocalAdminSharp - .NET executable to use when dealing with privilege escalation on Windows to gain local administrator access

Sandman - Sandman is a NTP based backdoor for red team engagements in hardened networks.

DPAPISnoop - A C# tool to output crackable DPAPI hashes from user MasterKeys

CIMplant - C# port of WMImplant which uses either CIM or WMI to query remote systems