#etw (14 Repositories)
Ranked open-source repositories tagged with #etw, scored by pull request acceptance likelihood and maintainer engagement velocity.
20.3%
0.7h
14 repositories tagged #etw
Karib0u/rustinel
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
microsoft/profile-explorer
CPU profiling trace viewer
xoofx/ultra
An advanced profiler for .NET Applications on Windows and macOS
Siemens-Healthineers/ETWAnalyzer
Command line tool to analyze one/many ETW file/s with simple queries for common issues.
H4NM/WhoYouCalling
Records an executable's network activity into a Full Packet Capture file (.pcap) and much more.
microsoft/krabsetw
KrabsETW provides a modern C++ wrapper and a .NET wrapper around the low-level ETW trace consumption functions.
Idov31/EtwSuite
Windows native ETW inspection suite for browsing providers, reading metadata, consuming live events, recording ETL traces, filtering results, and inspecting ETL/JSON/CSV recordings from one desktop tool.
DamonMohammadbagher/ETWProcessMon2
ETWProcessMon2 is for Monitoring Process/Thread/Memory/Imageloads/TCPIP via ETW + Detection for Remote-Thread-Injection & Payload Detection by VirtualMemAlloc Events (in-memory) etc.
repnz/etw-providers-docs
Document ETW providers
lahell/PSDiscoveryProtocol
Capture and parse CDP and LLDP packets on local or remote computers
theSecHunter/Hades-Windows
Hades HIDS/HIPS for Windows
lowleveldesign/debug-recipes
My notes on software troubleshooting, covering debugging and tracing techniques and tools. Available at wtrace.net.
lowleveldesign/wtrace
Command line tracing tool for Windows, based on ETW.
airbus-cert/Winshark
A wireshark plugin to instrument ETW