Alternatives and similar repositories for Windows10EtwEvents

Users that are interested in Windows10EtwEvents are comparing it to the libraries listed below

• repnz / etw-providers-docs
  Document ETW providers
  ☆264Updated 5 years ago
• zodiacon / EtwExplorer
  View ETW Provider manifest
  ☆557Updated last year
• pathtofile / Sealighter
  Sysmon-Like research tool for ETW
  ☆378Updated 3 years ago
• hfiref0x / WDExtract
  Extract Windows Defender database from vdm files and unpack it
  ☆472Updated 4 months ago
• commial / experiments
  Expriments
  ☆476Updated last year
• marcosd4h / memhunter
  Live hunting of code injection techniques
  ☆383Updated 6 years ago
• microsoft / krabsetw
  KrabsETW provides a modern C++ wrapper and a .NET wrapper around the low-level ETW trace consumption functions.
  ☆733Updated last week
• 0xeb / WinTools
  A collection of free miscellaneous Windows tools
  ☆139Updated 5 months ago
• cyberark / RPCMon
  RPC Monitor tool based on Event Tracing for Windows
  ☆377Updated last year
• fireeye / pywintrace
  ETW Python Library
  ☆293Updated 2 years ago
• marcosd4h / sysmonx
  SysmonX - An Augmented Drop-In Replacement of Sysmon
  ☆215Updated 6 years ago
• endgameinc / ClrGuard
  ☆221Updated 7 years ago
• D4stiny / PeaceMaker
  PeaceMaker Threat Detection is a Windows kernel-based application that detects advanced techniques used by malware.
  ☆429Updated 5 years ago
• palantir / exploitguard
  Documentation and supporting script sample for Windows Exploit Guard
  ☆169Updated 3 months ago
• mattifestation / WDACTools
  A PowerShell module to facilitate building, configuring, deploying, and auditing Windows Defender Application Control (WDAC) policies
  ☆230Updated 3 years ago
• kevoreilly / capemon
  capemon: CAPE's monitor
  ☆143Updated this week
• nasbench / EVTX-ETW-Resources
  Event Tracing For Windows (ETW) Resources
  ☆412Updated last month
• pathtofile / PPLRunner
  Run Processes as PPL with ELAM
  ☆173Updated 3 years ago
• yardenshafir / WinDbg_Scripts
  Useful scripts for WinDbg using the debugger data model
  ☆426Updated last year
• SinaKarvandi / Process-Magics
  This is a collection of interesting codes about Windows Process creation.
  ☆238Updated last year
• 0xAlexei / WindowsDefenderTools
  Tools for instrumenting Windows Defender's mpengine.dll
  ☆308Updated 7 years ago
• ionescu007 / HookingNirvana
  Recon 2015 Presentation from Alex Ionescu
  ☆248Updated 9 years ago
• mandiant / STrace
  A DTrace on Windows Reimplementation
  ☆366Updated 2 months ago
• msuhanov / regf
  Windows registry file format specification
  ☆352Updated 7 years ago
• xuanxuan0 / TiEtwAgent
  PoC memory injection detection agent based on ETW, for offensive and defensive research purposes
  ☆294Updated 4 years ago
• eronnen / procmon-parser
  Parser to process monitor file formats
  ☆155Updated 2 months ago
• conix-security / zer0m0n
  zer0m0n driver for cuckoo sandbox
  ☆368Updated 10 years ago
• ladislav-zezula / FileTest
  Source code for File Test - Interactive File System Test Tool
  ☆300Updated 4 months ago
• rajiv2790 / FalconEye
  ☆304Updated 4 years ago
• jthuraisamy / TelemetrySourcerer
  Enumerate and disable common sources of telemetry used by AV/EDR.
  ☆813Updated 4 years ago