bi-zone/etw external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

bi-zone/etw

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/bi-zone/etw)

Close

bi-zone / etwView on GitHubMore

• External links
• Readme badge

Go library for ETW (Event Tracing for Windows) events processing

☆75Jul 13, 2022Updated 4 years ago

Alternatives and similar repositories for etw

Users that are interested in etw are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• bi-zone / wmi

  View on GitHub
  Windows Management Instrumentation (WMI) for Go
  ☆14Aug 6, 2020Updated 6 years ago
• 0xrawsec / golang-etw

  View on GitHub
  ☆46Sep 22, 2022Updated 3 years ago
• bi-zone / go-fileversion

  View on GitHub
  Go wrapper for querying windows version-information resource.
  ☆26Apr 27, 2024Updated 2 years ago
• nodauf / ToDns

  View on GitHub
  Transfer file over Dns
  ☆10Nov 26, 2024Updated last year
• timwhitez / Doge-PX

  View on GitHub
  DPX - the Doge Packer for eXecutables
  ☆29Dec 21, 2021Updated 4 years ago
• Deploy to Railway using AI coding agents - Free Credits Offer • Ad
  Use Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
• audibleblink / dllexical

  View on GitHub
  easy dll proxying in go
  ☆14Apr 24, 2022Updated 4 years ago
• repnz / etw-providers-docs

  View on GitHub
  Document ETW providers
  ☆309Mar 28, 2020Updated 6 years ago
• bfosterjr / portfwd

  View on GitHub
  ☆13Dec 27, 2014Updated 11 years ago
• hashlookup / hashlookup-gui

  View on GitHub
  Provides a multi-platform Graphical User Interface for hashlookup
  ☆12Jul 12, 2024Updated 2 years ago
• MonaxGT / gosddl

  View on GitHub
  GoSDDL converter
  ☆11Apr 30, 2019Updated 7 years ago
• parsiya / golnk

  View on GitHub
  Golang package for parsing Windows shell link binary (lnk or Windows shortcut) files.
  ☆38Apr 1, 2026Updated 5 months ago
• EspressoCake / NativeFunctionStaticMap

  View on GitHub
  A *very* imperfect attempt to correlate Kernel32 function calls to native API (Nt/Zw) counterparts/execution flow.
  ☆28Dec 16, 2021Updated 4 years ago
• cwbird / task

  View on GitHub
  go实现windows计划任务管理，过杀软
  ☆12Aug 26, 2021Updated 5 years ago
• PwCUK-CTO / BinaryNinja_shellcodehashes

  View on GitHub
  Port of Mandiant ShellcodeHashes plugin from IDA to BinaryNinja
  ☆11Jul 24, 2024Updated 2 years ago
• Virtual machines for every use case on DigitalOcean • Ad
  Get dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
• nasbench / EVTX-ETW-Resources

  View on GitHub
  Event Tracing For Windows (ETW) Resources
  ☆437Oct 30, 2025Updated 10 months ago
• jstnk9 / ETW-Almulahaza

  View on GitHub
  ETW-Almulahaza is a consumer python-based tool that help you monitor ETW events of the operating system
  ☆13Jun 24, 2022Updated 4 years ago
• pathtofile / PPLRunner

  View on GitHub
  Run Processes as PPL with ELAM
  ☆186Mar 17, 2022Updated 4 years ago
• zboyco / go-server

  View on GitHub
  go-server 是一个用 Go 语言编写的简单而灵活的服务器框架，旨在帮助开发者快速构建基于 TCP 和 UDP 协议的 socket 网络服务。
  ☆20Jul 14, 2026Updated last month
• matterpreter / FindETWProviderImage

  View on GitHub
  Quickly search for references to a GUID in DLLs, EXEs, and drivers
  ☆75Dec 10, 2021Updated 4 years ago
• wbenny / EtwConsumerNT

  View on GitHub
  Simple project that demonstrates how an ETW consumer can be created just by using NTDLL
  ☆154Feb 23, 2019Updated 7 years ago
• CyCat-project / cycat-taxonomy

  View on GitHub
  CyCAT.org taxonomies
  ☆15May 22, 2021Updated 5 years ago
• frikky / hive4go

  View on GitHub
  A Golang API for TheHive
  ☆13Sep 3, 2020Updated 6 years ago
• 0xrawsec / golang-win32

  View on GitHub
  Golang wrappers functions to call Windows APIs
  ☆83Aug 9, 2022Updated 4 years ago
• Managed hosting for WordPress and PHP on Cloudways • Ad
  Managed hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
• omerbenamram / mft

  View on GitHub
  A parser for the MFT (Master File Table) format
  ☆161Jan 3, 2026Updated 8 months ago
• stephenbradshaw / shellcode

  View on GitHub
  Various shell code I have written
  ☆17Oct 9, 2020Updated 5 years ago
• RomaissaAdjailia / Get-AppLockerEventlog

  View on GitHub
  This is a repo for fetching Applocker event log by parsing the win-event log
  ☆29Aug 6, 2022Updated 4 years ago
• timwhitez / Doge-RL

  View on GitHub
  Reflective DLL injection Execution
  ☆19Sep 9, 2022Updated 3 years ago
• NextronSystems / evtx-baseline

  View on GitHub
  A repository hosting example goodware evtx logs containing sample software installation and basic user interaction
  ☆93Mar 11, 2026Updated 5 months ago
• freetaxii / libstix2

  View on GitHub
  APIs for generating STIX 2.1 and TAXII 2.1 messages with Go (Golang)
  ☆61Nov 2, 2025Updated 10 months ago
• microsoft / rust_win_etw

  View on GitHub
  Allows Rust code to log events to ETW
  ☆134Dec 18, 2025Updated 8 months ago
• zaneGittins / go-inject

  View on GitHub
  Process injection techniques written in Go.
  ☆63Jul 1, 2023Updated 3 years ago
• kolide / docker-osquery

  View on GitHub
  Dockerfiles for containerized osquery
  ☆14May 23, 2017Updated 9 years ago
• Deploy open-source AI quickly and easily - Special Bonus Offer • Ad
  Runpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
• SigmaHQ / sigma_engine

  View on GitHub
  ☆14Jun 15, 2026Updated 2 months ago
• Nan3r / geacon_apt

  View on GitHub
  geacon for apt profile
  ☆20Aug 11, 2022Updated 4 years ago
• woanware / etw-event-dumper

  View on GitHub
  ☆33Feb 26, 2022Updated 4 years ago
• pathtofile / SealighterTI

  View on GitHub
  Combining Sealighter with unpatched exploits to run the Threat-Intelligence ETW Provider
  ☆210Dec 6, 2022Updated 3 years ago
• rustysec / win-event-log-rs

  View on GitHub
  clean interface for the windows event log
  ☆28Mar 19, 2026Updated 5 months ago
• udoprog / ptscan

  View on GitHub
  A pointer scanner for Windows written in Rust
  ☆19Dec 18, 2025Updated 8 months ago
• bugch3ck / SharpLdapWhoami

  View on GitHub
  WhoAmI by asking the LDAP service on a domain controller.
  ☆67Feb 8, 2022Updated 4 years ago