Skip to content
#

memory-scanner-by-etw-events

Star

Here is 1 public repository matching this topic...

DamonMohammadbagher / ETWProcessMon2

Star 307

ETWProcessMon2 is for Monitoring Process/Thread/Memory/Imageloads/TCPIP via ETW + Detection for Remote-Thread-Injection & Payload Detection by VirtualMemAlloc Events (in-memory) etc.

etw memory-scanning blueteam memory-scanner realtime-monitoring remote-thread-injection processmonitoring meterpreter-detection tcpip-monitoring thread-monitor imageloads malicious-traffic-detection detection-etw-events virtualmemallocation-detection memory-scanner-by-etw-events threat-hunting-via-etw threat-hunting-via-sysmon cobaltstrike-detection payload-detection technique-detection
  • Updated Mar 20, 2024
  • C#

Improve this page

Add a description, image, and links to the memory-scanner-by-etw-events topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the memory-scanner-by-etw-events topic, visit your repo's landing page and select "manage topics."

Learn more