Alternatives and similar repositories for Windows10EtwEvents

Users that are interested in Windows10EtwEvents are comparing it to the libraries listed below

• repnz / etw-providers-docs
  Document ETW providers
  ☆267Updated 5 years ago
• zodiacon / EtwExplorer
  View ETW Provider manifest
  ☆567Updated last year
• pathtofile / Sealighter
  Sysmon-Like research tool for ETW
  ☆383Updated 3 years ago
• commial / experiments
  Expriments
  ☆478Updated last year
• hfiref0x / WDExtract
  Extract Windows Defender database from vdm files and unpack it
  ☆473Updated 5 months ago
• marcosd4h / sysmonx
  SysmonX - An Augmented Drop-In Replacement of Sysmon
  ☆216Updated 6 years ago
• cyberark / RPCMon
  RPC Monitor tool based on Event Tracing for Windows
  ☆383Updated last year
• marcosd4h / memhunter
  Live hunting of code injection techniques
  ☆385Updated 6 years ago
• endgameinc / ClrGuard
  ☆220Updated 7 years ago
• fireeye / pywintrace
  ETW Python Library
  ☆293Updated 2 years ago
• D4stiny / PeaceMaker
  PeaceMaker Threat Detection is a Windows kernel-based application that detects advanced techniques used by malware.
  ☆431Updated 5 years ago
• 0xeb / WinTools
  A collection of free miscellaneous Windows tools
  ☆142Updated 6 months ago
• palantir / exploitguard
  Documentation and supporting script sample for Windows Exploit Guard
  ☆169Updated 4 months ago
• 0xAlexei / WindowsDefenderTools
  Tools for instrumenting Windows Defender's mpengine.dll
  ☆310Updated 7 years ago
• microsoft / krabsetw
  KrabsETW provides a modern C++ wrapper and a .NET wrapper around the low-level ETW trace consumption functions.
  ☆748Updated last month
• msuhanov / regf
  Windows registry file format specification
  ☆354Updated 7 years ago
• xuanxuan0 / TiEtwAgent
  PoC memory injection detection agent based on ETW, for offensive and defensive research purposes
  ☆297Updated 4 years ago
• nasbench / EVTX-ETW-Resources
  Event Tracing For Windows (ETW) Resources
  ☆413Updated 3 months ago
• eronnen / procmon-parser
  Parser to process monitor file formats
  ☆158Updated 4 months ago
• pathtofile / PPLRunner
  Run Processes as PPL with ELAM
  ☆175Updated 3 years ago
• tyranid / WindowsRpcClients
  This respository is a collection of C# class libraries which implement RPC clients for various versions of the Windows Operating System f…
  ☆284Updated 5 years ago
• ladislav-zezula / FileTest
  Source code for File Test - Interactive File System Test Tool
  ☆302Updated 5 months ago
• rajiv2790 / FalconEye
  ☆306Updated 4 years ago
• msuiche / LiveCloudKd
  Hyper-V Research is trendy now
  ☆192Updated last year
• kevoreilly / capemon
  capemon: CAPE's monitor
  ☆145Updated this week
• ionescu007 / HookingNirvana
  Recon 2015 Presentation from Alex Ionescu
  ☆250Updated 10 years ago
• yardenshafir / WinDbg_Scripts
  Useful scripts for WinDbg using the debugger data model
  ☆429Updated last year
• pan-unit42 / dotnetfile
  ☆113Updated 4 months ago
• zodiacon / DriverMon
  Monitor activity of any driver
  ☆352Updated 5 years ago
• Cyb3rWard0g / WinRpcFunctions
  ☆68Updated 3 years ago