procmon
There are 1 repository under procmon topic.
- Language:C# 1065
wecooperate / iMonitor
iMonitor（冰镜 - 终端行为分析系统）
Language:C++ 772The world's most powerful System Activity Monitor Engine · 一款功能强大的终端行为采集防御开发套件 ~ 旨在帮助EDR、零信任、数据安全、审计管控等终端安全软件可以快速实现产品功能， 而不用关心底层驱动的开发、维护和兼容性问题，让其可以专注于业务开发
Language:C++ 364- Language:C 294
eronnen / procmon-parser
Parser to process monitor file formats
Language:Python 153- Language:C 85
bitranox / fingerprint
Monitoring Registry and File Changes in Windows
Language:Python 69wuanzhuan / system_monitor
Monitor windows kernel event, based on etw, development in rust. A replacement of procmon. more events and useful filter. Typically can check handle leak for a few weeks.
Language:Rust 29dotnetos / diagnosticsexpert-course
Materials for Diagnostics Expert online course
Language:C# 16lowleveldesign / send2procmon
A command line tool that sends its input data to a running procmon instance.
Language:C# 15- Language:C 12
asian-mario / b-top
a rust-based process monitor and manager using ratatui and tachyonfx for shaders. currently supporting UNIX-like systems
Language:Rust 11- Language:Go 10
- Language:C# 7
false00 / packetTrail
Associates netflow data with system processes and logs to syslog
Language:Python 7- Language:C++ 3
5Noxi / wpr-reg-records
Registry activity (queries) records of specific keys & subkeys using WPA / procmon and miscellaneous kernel values research.
Language:C 2- LSTMalware
e-war / LSTMalware
A LSTM (Long Short Term Memory) model + dataset. Utilises the procmon logging system to analyze malware/virus process activity in the form of binary classification [malicious/benign]. Created for my University final project.
Language:PureBasic 2 sergiovks / Procmon-PrivEsc-LateralMovement
The procmon script is used to monitorize commands that were ran or will run on the system, in order to make privilege escalation and lateral movement on a Linux target.
Language:Shell 2debilsyka / ProcMonDebugOutput
See Your Trace Statements in Process Monitor!
Language:Pascal 1hansalemaos / procmondf
provides a convenient and efficient solution for capturing and analyzing system activity logs using Procmon and converting them to the pandas compatible Parquet file format (2% of the original pml file size)
Language:Python 1- Language:PowerShell 0
Psmths / ingest-procmon
Python script to index SysInternals procmon CSV exports into elasticsearch
Language:Python
