Alternatives and similar repositories for SilkETW

Users that are interested in SilkETW are comparing it to the libraries listed below

• danielbohannon / Revoke-Obfuscation
  PowerShell Obfuscation Detection Framework
  ☆745Updated last year
• mvelazc0 / PurpleSharp
  PurpleSharp is a C# adversary simulation tool that executes adversary techniques with the purpose of generating attack telemetry in monit…
  ☆830Updated 10 months ago
• DissectMalware / XLMMacroDeobfuscator
  Extract and Deobfuscate XLM macros (a.k.a Excel 4.0 Macros)
  ☆584Updated last year
• R3MRUM / PSDecode
  PowerShell script for deobfuscating encoded PowerShell scripts
  ☆428Updated 4 years ago
• nasbench / EVTX-ETW-Resources
  Event Tracing For Windows (ETW) Resources
  ☆406Updated 2 weeks ago
• 3lp4tr0n / BeaconHunter
  Detect and respond to Cobalt Strike beacons using ETW.
  ☆509Updated 3 years ago
• zeronetworks / rpcfirewall
  ☆529Updated 5 months ago
• zodiacon / EtwExplorer
  View ETW Provider manifest
  ☆546Updated last year
• MHaggis / sysmon-dfir
  Sources, configuration and how to detect evil things utilizing Microsoft Sysmon.
  ☆929Updated last year
• olafhartong / sysmon-cheatsheet
  All sysmon event types and their fields explained
  ☆559Updated 4 years ago
• EricZimmerman / evtx
  C# based evtx parser with lots of extras
  ☆331Updated 2 months ago
• airbus-cert / Winshark
  A wireshark plugin to instrument ETW
  ☆575Updated 3 years ago
• JPCERTCC / ToolAnalysisResultSheet
  Tool Analysis Result Sheet
  ☆355Updated 7 years ago
• leechristensen / UnmanagedPowerShell
  Executes PowerShell from an unmanaged process
  ☆505Updated 9 years ago
• trustedsec / SysmonCommunityGuide
  TrustedSec Sysinternals Sysmon Community Guide
  ☆1,247Updated 3 months ago
• mandiant / flare-wmi
  ☆428Updated 2 years ago
• ION28 / BLUESPAWN
  An Active Defense and EDR software to empower Blue Teams
  ☆1,306Updated 2 years ago
• mandiant / DueDLLigence
  ☆479Updated 2 years ago
• mitre-attack / attack-arsenal
  A collection of red team and adversary emulation resources developed and released by MITRE.
  ☆523Updated 4 years ago
• bats3c / Ghost-In-The-Logs
  Evade sysmon and windows event logging
  ☆626Updated 5 years ago
• StrangerealIntel / CyberThreatIntel
  Analysis of malware and Cyber Threat Intel of APT and cybercriminals groups
  ☆719Updated 2 years ago
• ion-storm / sysmon-config
  Advanced Sysmon ATT&CK configuration focusing on Detecting the Most Techniques per Data source in MITRE ATT&CK, Provide Visibility into …
  ☆812Updated 2 years ago
• marcosd4h / memhunter
  Live hunting of code injection techniques
  ☆383Updated 6 years ago
• nshalabi / SysmonTools
  Utilities for Sysmon
  ☆1,560Updated last month
• JPCERTCC / SysmonSearch
  Investigate suspicious activity by visualizing Sysmon's event log
  ☆425Updated last year
• mandiant / capa-rules
  Standard collection of rules for capa: the tool for enumerating the capabilities of programs
  ☆649Updated last week
• Sentinel-One / CobaltStrikeParser
  ☆1,117Updated last year
• strontic / xcyclopedia
  Encyclopedia for Executables
  ☆458Updated 4 years ago
• Mr-Un1k0d3r / EDRs
  ☆2,152Updated 2 years ago
• EricZimmerman / LECmd
  Lnk Explorer Command line edition!!
  ☆329Updated 10 months ago