etw topic

Event Tracing For Windows (ETW) Resources

nasbench

Simple project that demonstrates how an ETW consumer can be created just by using NTDLL

wbenny

Document ETW providers

repnz

.NET Logging adaptors

microsoft

让Etwhook再次伟大! Make InfinityHook Great Again!

huoji120

Capture and parse CDP and LLDP packets on local or remote computers

lahell

Logs key Windows process performance metrics. #nsacyber

nsacyber

Tool and library to convert ETW logs to JSON files

microsoft

ETWProcessMon2 is for Monitoring Process/Thread/Memory/Imageloads/TCPIP via ETW + Detection for Remote-Thread-Injection & Payload Detection by VirtualMemAlloc Events (in-memory) etc.

DamonMohammadbagher

ETWNetMonv3 is simple C# code for Monitoring TCP Network Connection via ETW & ETWProcessMon/2 is for Monitoring Process/Thread/Memory/Imageloads/TCPIP via ETW + Detection for Remote-Thread-Injection &...

DamonMohammadbagher