Alternatives and similar repositories for etw:

Users that are interested in etw are comparing it to the libraries listed below

• 0xrawsec / golang-etw
  ☆36Updated 2 years ago
• 0xrawsec / gene
  Signature engine for all your logs
  ☆167Updated last year
• codeyourweb / irma
  enpoint detection / live analysis & sandbox host / signatures quality test
  ☆44Updated 3 years ago
• Velocidex / evtx
  Golang Parser for Microsoft Event Logs
  ☆101Updated 2 months ago
• 0xrawsec / golang-evtx
  ☆164Updated 2 years ago
• bradleyjkemp / sigma-go
  A Go implementation and parser for Sigma rules.
  ☆86Updated 6 months ago
• freetaxii / libstix2
  APIs for generating STIX 2.1 and TAXII 2.1 messages with Go (Golang)
  ☆53Updated 3 months ago
• marcosd4h / sysmonx
  SysmonX - An Augmented Drop-In Replacement of Sysmon
  ☆214Updated 5 years ago
• capnspacehook / taskmaster
  Windows Task Scheduler Library for Go
  ☆144Updated last week
• fkie-cad / yapscan
  Yapscan is a YAra based Process SCANner, aimed at giving more control about what to scan and giving detailed reports on matches.
  ☆61Updated last year
• Velocidex / oleparse
  Golang parser for OLE files
  ☆31Updated last week
• activeshadow / go-atomicredteam
  go-atomicredteam is a Golang application to execute tests as defined in the atomics folder of Red Canary's Atomic Red Team project (https…
  ☆49Updated 2 years ago
• markuskont / go-sigma-rule-engine
  Golang library that implements a sigma log rule parser and match engine.
  ☆94Updated 8 months ago
• hdm / jarm-go
  A Go implementation of JARM
  ☆119Updated 2 years ago
• 0xrawsec / gene-rules
  ☆39Updated 2 years ago
• botherder / go-autoruns
  Collect autorun records from running system
  ☆61Updated 3 years ago
• fox-it / dissect.cobaltstrike
  Python library for dissecting and parsing Cobalt Strike related data such as Beacon payloads and Malleable C2 Profiles
  ☆161Updated 5 months ago
• Velocidex / go-ese
  Go implementation of an Extensible Storage Engine parser
  ☆29Updated last month
• Neo23x0 / yaraQA
  YARA rule analyzer to improve rule quality and performance
  ☆97Updated 2 months ago
• Neo23x0 / YARA-Performance-Guidelines
  A guide on how to write fast and memory friendly YARA rules
  ☆141Updated last month
• strozfriedberg / cobaltstrike-config-extractor
  Cobalt Strike Beacon configuration extractor and parser.
  ☆150Updated 3 years ago
• fox-it / cobaltstrike-beacon-data
  Open Dataset of Cobalt Strike Beacon metadata (2018-2022)
  ☆125Updated 2 years ago
• VirusTotal / gyp
  gyp: A pure Go YARA parser
  ☆105Updated last year
• Velocidex / go-prefetch
  A golang implementation of a prefetch parser.
  ☆19Updated 6 months ago
• Velocidex / go-ntfs
  An NTFS file parser in Go
  ☆67Updated last month
• CybercentreCanada / CCCS-Yara
  YARA rule metadata specification and validation utility / Spécification et validation pour les règles YARA
  ☆99Updated 3 weeks ago
• airbus-cert / yara-ttd
  Use YARA rules on Time Travel Debugging traces
  ☆89Updated last year
• avast / yarang
  Alternative YARA scanning engine
  ☆68Updated 2 years ago
• spyre-project / spyre
  simple YARA-based IOC scanner
  ☆169Updated last month
• Velocidex / go-pe
  A Portable Executable parser for Golang
  ☆47Updated 2 months ago