DamonMohammadbagher/ETWNetMonv3

ETWNetMonv3 is simple C# code for Monitoring TCP Network Connection via ETW & ETWProcessMon/2 is for Monitoring Process/Thread/Memory/Imageloads/TCPIP via ETW + Detection for Remote-Thread-Injection & Payload Detection by VirtualMemAlloc Events (in-memory) etc.

语言：C# · GitHub 星标：39 · Fork：12

话题：blue-team · blueteam · csharp-code · defensive · defensivetool · detection · etw · etw-monitoring-threads

在 GitHub 上查看原仓库