Alternatives and similar repositories for etw:

Users that are interested in etw are comparing it to the libraries listed below

• 0xrawsec / golang-etw
  ☆35Updated 2 years ago
• codeyourweb / irma
  enpoint detection / live analysis & sandbox host / signatures quality test
  ☆44Updated 3 years ago
• Velocidex / evtx
  Golang Parser for Microsoft Event Logs
  ☆101Updated 3 weeks ago
• 0xrawsec / gene
  Signature engine for all your logs
  ☆167Updated last year
• bradleyjkemp / sigma-go
  A Go implementation and parser for Sigma rules.
  ☆86Updated 5 months ago
• 0xrawsec / golang-evtx
  ☆164Updated 2 years ago
• VirusTotal / gyp
  gyp: A pure Go YARA parser
  ☆106Updated 11 months ago
• Velocidex / oleparse
  Golang parser for OLE files
  ☆31Updated 7 months ago
• freetaxii / libstix2
  APIs for generating STIX 2.1 and TAXII 2.1 messages with Go (Golang)
  ☆52Updated 2 months ago
• hdm / jarm-go
  A Go implementation of JARM
  ☆119Updated 2 years ago
• markuskont / go-sigma-rule-engine
  Golang library that implements a sigma log rule parser and match engine.
  ☆94Updated 6 months ago
• fkie-cad / yapscan
  Yapscan is a YAra based Process SCANner, aimed at giving more control about what to scan and giving detailed reports on matches.
  ☆61Updated last year
• Velocidex / go-ese
  Go implementation of an Extensible Storage Engine parser
  ☆28Updated 4 months ago
• activeshadow / go-atomicredteam
  go-atomicredteam is a Golang application to execute tests as defined in the atomics folder of Red Canary's Atomic Red Team project (https…
  ☆49Updated last year
• 0xrawsec / gene-rules
  ☆39Updated 2 years ago
• marcosd4h / sysmonx
  SysmonX - An Augmented Drop-In Replacement of Sysmon
  ☆212Updated 5 years ago
• fox-it / cobaltstrike-beacon-data
  Open Dataset of Cobalt Strike Beacon metadata (2018-2022)
  ☆125Updated 2 years ago
• botherder / go-autoruns
  Collect autorun records from running system
  ☆59Updated 3 years ago
• Velocidex / go-prefetch
  A golang implementation of a prefetch parser.
  ☆19Updated 5 months ago
• scalingdata / gowinlog
  Go library for subscribing to Windows Event Log
  ☆29Updated 5 years ago
• Velocidex / go-ntfs
  An NTFS file parser in Go
  ☆67Updated this week
• jsecurity101 / Windows-API-To-Sysmon-Events
  A repository that maps API calls to Sysmon Event ID's.
  ☆117Updated 2 years ago
• capnspacehook / taskmaster
  Windows Task Scheduler Library for Go
  ☆144Updated 3 weeks ago
• CybercentreCanada / CCCS-Yara
  YARA rule metadata specification and validation utility / Spécification et validation pour les règles YARA
  ☆99Updated this week
• spyre-project / spyre
  simple YARA-based IOC scanner
  ☆166Updated this week
• strozfriedberg / cobaltstrike-config-extractor
  Cobalt Strike Beacon configuration extractor and parser.
  ☆150Updated 3 years ago
• fox-it / dissect.cobaltstrike
  Python library for dissecting and parsing Cobalt Strike related data such as Beacon payloads and Malleable C2 Profiles
  ☆158Updated 4 months ago
• Velocidex / go-pe
  A Portable Executable parser for Golang
  ☆47Updated last month
• airbus-cert / yara-ttd
  Use YARA rules on Time Travel Debugging traces
  ☆89Updated last year
• mole-ids / mole
  Yara powered NIDS with high speed packet capture powered by PF_RING
  ☆68Updated 9 months ago