PSDetour | C# Ecosystem Directory

PSDetour - v0.4.1 Latest Release

Published by jborean93 about 1 year ago

What's Changed

Fix up Trace-PSDetourProcess with Function based scriptblocks by @jborean93 in https://github.com/jborean93/PSDetour/pull/11

Allow using a scriptblock backed by a FunctionDefinitionAst (${Function:Func-Name}) for hooks provided to Trace-PSDetourProcess

Full Changelog: https://github.com/jborean93/PSDetour/compare/v0.4.0...v0.4.1

PSDetour - v0.4.0

Published by jborean93 about 1 year ago

Improve trace command helpers by @jborean93 in https://github.com/jborean93/PSDetour/pull/10

Automatically define -FunctionsToDefine in the hooks being run with Trace-PSDetourProcess, no need to call $this.State.GetFunction('Name') to redefine it
- $this.State.GetFunction has been removed and will no longer work
Ensure the scriptblocks used with Trace-PSDetourProcess keep the original stacktrace locations for better debugging

Full Changelog: https://github.com/jborean93/PSDetour/compare/v0.3.1...v0.4.0

PSDetour - v0.3.1

Published by jborean93 about 1 year ago

Added lock for Trace-PSDetourProcess output pipe to avoid multiple threads clobbering the serialized output

Full Changelog: https://github.com/jborean93/PSDetour/compare/v0.3.0...v0.3.1

PSDetour - v0.3.0

Published by jborean93 over 1 year ago

Add Trace-PSDetourProcess and store detoured info by @jborean93 in https://github.com/jborean93/PSDetour/pull/6
Prepare for v0.3.0 release by @jborean93 in https://github.com/jborean93/PSDetour/pull/7

Added Trace-PSDetourProcess to make it easier to start hooks for auditing in other processes
- This provides a common mechanism that can be used to output data from a remote hook as well as wait for input data in the hook itself
Provides a DetouredModules property in the hooks $this variable
- This provides access to other detoured method's InvokeContext allowing the hook to call the underlying API
Remove separate parameter sets for New-PSDetourHook
- A breaking change is that DllName and MethodName must be specified with Address now
Added option -AddressIsOffset to specify -Address is located at the offset of the -DllName when loaded in the process

Full Changelog: https://github.com/jborean93/PSDetour/compare/v0.2.0...v0.3.0

PSDetour - v0.2.0

Published by jborean93 over 1 year ago

Update CI action versions by @jborean93 in https://github.com/jborean93/PSDetour/pull/3
Add hook by address to New-PSDetourHook by @jborean93 in https://github.com/jborean93/PSDetour/pull/5

Full Changelog: https://github.com/jborean93/PSDetour/compare/v0.1.1...v0.2.0

PSDetour - v0.1.1

Published by jborean93 almost 2 years ago

Remove stray Console.WriteLine by @jborean93 in https://github.com/jborean93/PSDetour/pull/2

Full Changelog: https://github.com/jborean93/PSDetour/compare/v0.1.0...v0.1.1

PSDetour -

Published by jborean93 almost 2 years ago