etw-monitoring-threads

Here are 2 public repositories matching this topic...

DamonMohammadbagher / Meterpreter_Payload_Detection

Meterpreter_Payload_Detection.exe tool for detecting Meterpreter in memory like IPS-IDS and Forensics tool

mpd signature etw meterpreter thread-injection meterpreter-payload-detection meterpreter-detection thread-injection-detection etwmonthread etw-monitoring-threads meterpreter-signature

Updated Jun 5, 2023
C#

DamonMohammadbagher / ETWNetMonv3

Star

ETWNetMonv3 is simple C# code for Monitoring TCP Network Connection via ETW & ETWProcessMon/2 is for Monitoring Process/Thread/Memory/Imageloads/TCPIP via ETW + Detection for Remote-Thread-Injection & Payload Detection by VirtualMemAlloc Events (in-memory) etc.

detection etw threat-hunting csharp-code meterpreter defensive blueteam blue-team networkmonitor tcpview etw-monitoring-threads defensivetool tcpv4

Updated Jun 6, 2023
C#

Improve this page

Add a description, image, and links to the etw-monitoring-threads topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the etw-monitoring-threads topic, visit your repo's landing page and select "manage topics."

Learn more

Provide feedback

Saved searches

Use saved searches to filter your results more quickly