Skip to content
#

etw

Star

Here are 6 public repositories matching this topic...

Language: Python
Filter by language
All 104 C# 45 C++ 19 C 11 Go 6 Python 6 Rust 4 HTML 3 PowerShell 3 Lua 2 Batchfile 1

petstuk / SigmaEye

Star 0

SigmaEye is a Windows process monitoring toolkit that integrates ETW and user-level monitoring with Sigma rules. It detects suspicious process behavior, LOLBins usage, and potential threats in real-time. Features include dual monitoring, DLL injection tracking, and customizable detection rules. Requires admin privileges for ETW monitoring.

etw threat-hunting dll-injection process-monitoring edr lolbins endpoint-security windows-security sigma-rules
  • Updated Feb 22, 2025
  • Python

Improve this page

Add a description, image, and links to the etw topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the etw topic, visit your repo's landing page and select "manage topics."

Learn more