GitHub - NUL0x4C/EtwSessionHijacking: A Poc on blocking Procmon from monitoring network events

NUL0x4C / EtwSessionHijacking Public

Notifications You must be signed in to change notification settings
Fork 12
Star 100

A Poc on blocking Procmon from monitoring network events

100 stars 12 forks Branches Tags Activity

Notifications

Name		Name	Last commit message	Last commit date
Latest commit History 8 Commits
LICENSE		LICENSE
README.md		README.md
main.cpp		main.cpp

Repository files navigation

EtwSessionHijacking: A Poc on blocking Procmon from monitoring network events

Demo:

demo.mp4

Based On : Design Issues Of Modern EDRs: Bypassing ETW-Based Solutions

About

A Poc on blocking Procmon from monitoring network events

Report repository

Releases

No releases published

Packages

No packages published

Languages

C++ 100.0%