10000 threat-hunting-via-sysmon · GitHub Topics · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content
#

threat-hunting-via-sysmon

Star

Here are 3 public repositories matching this topic...

DamonMohammadbagher / ETWProcessMon2

Star 304

ETWProcessMon2 is for Monitoring Process/Thread/Memory/Imageloads/TCPIP via ETW + Detection for Remote-Thread-Injection & Payload Detection by VirtualMemAlloc Events (in-memory) etc.

etw memory-scanning blueteam memory-scanner realtime-monitoring remote-thread-injection processmonitoring meterpreter-detection tcpip-monitoring thread-monitor imageloads malicious-traffic-detection detection-etw-events virtualmemallocation-detection memory-scanner-by-etw-events threat-hunting-via-etw threat-hunting-via-sysmon cobaltstrike-detection payload-detection technique-detection
  • Updated Mar 20, 2024
  • C#

Improve this page

Add a description, image, and links to the threat-hunting-via-sysmon topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the threat-hunting-via-sysmon topic, visit your repo's landing page and select "manage topics."

Learn more

0