etw-evasion

Here are 2 public repositories matching this topic...

Bypass the Event Trace Windows(ETW) and unhook ntdll.

malware evasion red-team etw-evasion ntdll-unhooking

A proof of concept ETW consumer that captures userland events in real time, displays them, and saves them into an .etl file

etw etw-evasion etw-agent etweventwrite

Add a description, image, and links to the etw-evasion topic page so that developers can more easily learn about it.

To associate your repository with the etw-evasion topic, visit your repo's landing page and select "manage topics."