You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
There is a good looking rust crate that supports reading ETW so it might be interesting to support ETW for real time detection. Not to be meant to use as a host IDS but more for checking if rules work in real time:
There is a good looking rust crate that supports reading ETW so it might be interesting to support ETW for real time detection. Not to be meant to use as a host IDS but more for checking if rules work in real time:
https://github.com/n4r1b/ferrisetw
https://docs.rs/ferrisetw/latest/ferrisetw/
For now I would like to see how easy/hard it would be to implement.
The text was updated successfully, but these errors were encountered: