bi-zone/etw external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

bi-zone/etw

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/bi-zone/etw)

Close

bi-zone / etwView on GitHubMore

• External links
• Readme badge

Go library for ETW (Event Tracing for Windows) events processing

☆73Jul 13, 2022Updated 4 years ago

Alternatives and similar repositories for etw

Users that are interested in etw are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• bi-zone / wmi

  View on GitHub
  Windows Management Instrumentation (WMI) for Go
  ☆14Aug 6, 2020Updated 5 years ago
• 0xrawsec / golang-etw

  View on GitHub
  ☆46Sep 22, 2022Updated 3 years ago
• nodauf / ToDns

  View on GitHub
  Transfer file over Dns
  ☆10Nov 26, 2024Updated last year
• timwhitez / Doge-PX

  View on GitHub
  DPX - the Doge Packer for eXecutables
  ☆29Dec 21, 2021Updated 4 years ago
• audibleblink / dllexical

  View on GitHub
  easy dll proxying in go
  ☆14Apr 24, 2022Updated 4 years ago
• End-to-end encrypted email - Proton Mail • Ad
  Special offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
• repnz / etw-providers-docs

  View on GitHub
  Document ETW providers
  ☆303Mar 28, 2020Updated 6 years ago
• bfosterjr / portfwd

  View on GitHub
  ☆13Dec 27, 2014Updated 11 years ago
• hashlookup / hashlookup-gui

  View on GitHub
  Provides a multi-platform Graphical User Interface for hashlookup
  ☆12Jul 12, 2024Updated 2 years ago
• MonaxGT / gosddl

  View on GitHub
  GoSDDL converter
  ☆11Apr 30, 2019Updated 7 years ago
• parsiya / golnk

  View on GitHub
  Golang package for parsing Windows shell link binary (lnk or Windows shortcut) files.
  ☆38Apr 1, 2026Updated 3 months ago
• EspressoCake / NativeFunctionStaticMap

  View on GitHub
  A *very* imperfect attempt to correlate Kernel32 function calls to native API (Nt/Zw) counterparts/execution flow.
  ☆28Dec 16, 2021Updated 4 years ago
• cwbird / task

  View on GitHub
  go实现windows计划任务管理，过杀软
  ☆12Aug 26, 2021Updated 4 years ago
• PwCUK-CTO / BinaryNinja_shellcodehashes

  View on GitHub
  Port of Mandiant ShellcodeHashes plugin from IDA to BinaryNinja
  ☆11Jul 24, 2024Updated 2 years ago
• nasbench / EVTX-ETW-Resources

  View on GitHub
  Event Tracing For Windows (ETW) Resources
  ☆433Oct 30, 2025Updated 8 months ago
• GPUs on demand by Runpod - Special Offer Available • Ad
  Run AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
• jstnk9 / ETW-Almulahaza

  View on GitHub
  ETW-Almulahaza is a consumer python-based tool that help you monitor ETW events of the operating system
  ☆13Jun 24, 2022Updated 4 years ago
• pathtofile / PPLRunner

  View on GitHub
  Run Processes as PPL with ELAM
  ☆178Mar 17, 2022Updated 4 years ago
• zboyco / go-server

  View on GitHub
  go-server 是一个用 Go 语言编写的简单而灵活的服务器框架，旨在帮助开发者快速构建基于 TCP 和 UDP 协议的 socket 网络服务。
  ☆14Jul 14, 2026Updated last week
• matterpreter / FindETWProviderImage

  View on GitHub
  Quickly search for references to a GUID in DLLs, EXEs, and drivers
  ☆75Dec 10, 2021Updated 4 years ago
• wbenny / EtwConsumerNT

  View on GitHub
  Simple project that demonstrates how an ETW consumer can be created just by using NTDLL
  ☆153Feb 23, 2019Updated 7 years ago
• frikky / hive4go

  View on GitHub
  A Golang API for TheHive
  ☆13Sep 3, 2020Updated 5 years ago
• 0xrawsec / golang-win32

  View on GitHub
  Golang wrappers functions to call Windows APIs
  ☆83Aug 9, 2022Updated 3 years ago
• omerbenamram / mft

  View on GitHub
  A parser for the MFT (Master File Table) format
  ☆161Jan 3, 2026Updated 6 months ago
• stephenbradshaw / shellcode

  View on GitHub
  Various shell code I have written
  ☆17Oct 9, 2020Updated 5 years ago
• 1-Click AI Models by DigitalOcean Gradient • Ad
  Deploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
• RomaissaAdjailia / Get-AppLockerEventlog

  View on GitHub
  This is a repo for fetching Applocker event log by parsing the win-event log
  ☆29Aug 6, 2022Updated 3 years ago
• timwhitez / Doge-RL

  View on GitHub
  Reflective DLL injection Execution
  ☆19Sep 9, 2022Updated 3 years ago
• zacbre / AssemblyCompressor

  View on GitHub
  Use GZip to compress your .NET assemblies for loading with AssemblyResolve.
  ☆20Apr 11, 2014Updated 12 years ago
• NextronSystems / evtx-baseline

  View on GitHub
  A repository hosting example goodware evtx logs containing sample software installation and basic user interaction
  ☆93Mar 11, 2026Updated 4 months ago
• freetaxii / libstix2

  View on GitHub
  APIs for generating STIX 2.1 and TAXII 2.1 messages with Go (Golang)
  ☆61Nov 2, 2025Updated 8 months ago
• microsoft / rust_win_etw

  View on GitHub
  Allows Rust code to log events to ETW
  ☆133Dec 18, 2025Updated 7 months ago
• zaneGittins / go-inject

  View on GitHub
  Process injection techniques written in Go.
  ☆63Jul 1, 2023Updated 3 years ago
• kolide / docker-osquery

  View on GitHub
  Dockerfiles for containerized osquery
  ☆14May 23, 2017Updated 9 years ago
• SigmaHQ / sigma_engine

  View on GitHub
  ☆15Jun 15, 2026Updated last month
• Wordpress hosting with auto-scaling - Free Trial Offer • Ad
  Fully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
• Nan3r / geacon_apt

  View on GitHub
  geacon for apt profile
  ☆20Aug 11, 2022Updated 3 years ago
• woanware / etw-event-dumper

  View on GitHub
  ☆33Feb 26, 2022Updated 4 years ago
• seryal / EventLogViewer

  View on GitHub
  Viewer for Windows Event Log
  ☆13Oct 21, 2019Updated 6 years ago
• pathtofile / SealighterTI

  View on GitHub
  Combining Sealighter with unpatched exploits to run the Threat-Intelligence ETW Provider
  ☆208Dec 6, 2022Updated 3 years ago
• rustysec / win-event-log-rs

  View on GitHub
  clean interface for the windows event log
  ☆28Mar 19, 2026Updated 4 months ago
• Enelg52 / Backpack

  View on GitHub
  Golang packer that use process hollowing
  ☆17May 1, 2022Updated 4 years ago
• udoprog / ptscan

  View on GitHub
  A pointer scanner for Windows written in Rust
  ☆19Dec 18, 2025Updated 7 months ago