Alternatives and similar repositories for Windows10EtwEvents

Users that are interested in Windows10EtwEvents are comparing it to the libraries listed below

• repnz / etw-providers-docs
  Document ETW providers
  ☆247Updated 5 years ago
• zodiacon / EtwExplorer
  View ETW Provider manifest
  ☆531Updated 10 months ago
• pathtofile / Sealighter
  Sysmon-Like research tool for ETW
  ☆364Updated 2 years ago
• commial / experiments
  Expriments
  ☆467Updated 11 months ago
• hfiref0x / WDExtract
  Extract Windows Defender database from vdm files and unpack it
  ☆458Updated last month
• marcosd4h / memhunter
  Live hunting of code injection techniques
  ☆383Updated 6 years ago
• fireeye / pywintrace
  ETW Python Library
  ☆290Updated 2 years ago
• cyberark / RPCMon
  RPC Monitor tool based on Event Tracing for Windows
  ☆372Updated last year
• marcosd4h / sysmonx
  SysmonX - An Augmented Drop-In Replacement of Sysmon
  ☆215Updated 5 years ago
• endgameinc / ClrGuard
  ☆219Updated 7 years ago
• microsoft / krabsetw
  KrabsETW provides a modern C++ wrapper and a .NET wrapper around the low-level ETW trace consumption functions.
  ☆699Updated 6 months ago
• 0xeb / WinTools
  A collection of free miscellaneous Windows tools
  ☆138Updated last month
• D4stiny / PeaceMaker
  PeaceMaker Threat Detection is a Windows kernel-based application that detects advanced techniques used by malware.
  ☆424Updated 5 years ago
• msuhanov / regf
  Windows registry file format specification
  ☆344Updated 6 years ago
• SinaKarvandi / Process-Magics
  This is a collection of interesting codes about Windows Process creation.
  ☆239Updated last year
• 0xAlexei / WindowsDefenderTools
  Tools for instrumenting Windows Defender's mpengine.dll
  ☆304Updated 6 years ago
• nasbench / EVTX-ETW-Resources
  Event Tracing For Windows (ETW) Resources
  ☆398Updated 11 months ago
• yardenshafir / WinDbg_Scripts
  Useful scripts for WinDbg using the debugger data model
  ☆420Updated last year
• kevoreilly / capemon
  capemon: CAPE's monitor
  ☆125Updated last week
• MagnetForensics / SwishDbgExt
  Incident Response & Digital Forensics Debugging Extension
  ☆383Updated 6 years ago
• palantir / exploitguard
  Documentation and supporting script sample for Windows Exploit Guard
  ☆157Updated this week
• zodiacon / ProcMonX
  Extended Process Monitor-like tool based on Event Tracing for Windows
  ☆475Updated 5 years ago
• ionescu007 / HookingNirvana
  Recon 2015 Presentation from Alex Ionescu
  ☆244Updated 9 years ago
• mandiant / STrace
  A DTrace on Windows Reimplementation
  ☆357Updated 7 months ago
• pathtofile / PPLRunner
  Run Processes as PPL with ELAM
  ☆168Updated 3 years ago
• zodiacon / DriverMon
  Monitor activity of any driver
  ☆343Updated 4 years ago
• rajiv2790 / FalconEye
  ☆300Updated 4 years ago
• xuanxuan0 / TiEtwAgent
  PoC memory injection detection agent based on ETW, for offensive and defensive research purposes
  ☆285Updated 4 years ago
• ladislav-zezula / FileTest
  Source code for File Test - Interactive File System Test Tool
  ☆295Updated last month
• zodiacon / ProcMonXv2
  Process Monitor X v2
  ☆630Updated last year