etw-monitoring-threads

Here are 3 public repositories matching this topic...

DamonMohammadbagher / Meterpreter_Payload_Detection

Meterpreter_Payload_Detection.exe tool for detecting Meterpreter in memory like IPS-IDS and Forensics tool

mpd signature etw meterpreter thread-injection meterpreter-payload-detection meterpreter-detection thread-injection-detection etwmonthread etw-monitoring-threads meterpreter-signature

Updated Jun 5, 2023
C#

DamonMohammadbagher / ETWNetMonv3

Star

ETWNetMonv3 is simple C# code for Monitoring TCP Network Connection via ETW & ETWProcessMon/2 is for Monitoring Process/Thread/Memory/Imageloads/TCPIP via ETW + Detection for Remote-Thread-Injection & Payload Detection by VirtualMemAlloc Events (in-memory) etc.

detection etw threat-hunting csharp-code meterpreter defensive blueteam blue-team networkmonitor tcpview etw-monitoring-threads defensivetool tcpv4

Updated Jun 6, 2023
C#

d3vobed / EtwScope

Star

ETW-based Windows telemetry and threat detection framework.

rust etw-monitoring-threads

Updated Jun 26, 2026
HTML

Add this topic to your repo

To associate your repository with the etw-monitoring-threads topic, visit your repo's landing page and select "manage topics."

Learn more