Skip to content
#

threat-hunting-via-sysmon

Star

Here are 3 public repositories matching this topic...

DamonMohammadbagher / ETWProcessMon2

Star 294

ETWProcessMon2 is for Monitoring Process/Thread/Memory/Imageloads/TCPIP via ETW + Detection for Remote-Thread-Injection & Payload Detection by VirtualMemAlloc Events (in-memory) etc.

etw memory-scanning blueteam memory-scanner realtime-monitoring remote-thread-injection processmonitoring meterpreter-detection tcpip-monitoring thread-monitor imageloads malicious-traffic-detection detection-etw-events virtualmemallocation-detection memory-scanner-by-etw-events threat-hunting-via-etw threat-hunting-via-sysmon cobaltstrike-detection payload-detection technique-detection
  • Updated Mar 20, 2024
  • C#

Improve this page

Add a description, image, and links to the threat-hunting-via-sysmon topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the threat-hunting-via-sysmon topic, visit your repo's landing page and select "manage topics."

Learn more