threat-hunting-via-etw

There are 0 repository under threat-hunting-via-etw topic.

DamonMohammadbagher / ETWProcessMon2
ETWProcessMon2 is for Monitoring Process/Thread/Memory/Imageloads/TCPIP via ETW + Detection for Remote-Thread-Injection & Payload Detection by VirtualMemAlloc Events (in-memory) etc.
processmonitoring thread-monitor remote-thread-injection blueteam tcpip-monitoring etw imageloads realtime-monitoring meterpreter-detection malicious-traffic-detection detection-etw-events virtualmemallocation-detection memory-scanner memory-scanner-by-etw-events threat-hunting-via-etw threat-hunting-via-sysmon cobaltstrike-detection payload-detection technique-detection memory-scanning
Language:C# 283