GitHub - luhko/EtwSessionHijacking: A Poc on blocking Procmon from monitoring network events

luhko / EtwSessionHijacking Public

forked from NUL0x4C/EtwSessionHijacking

Notifications You must be signed in to change notification settings
Fork 0
Star 0

A Poc on blocking Procmon from monitoring network events

0 stars 12 forks Branches Tags Activity

Notifications

Name		Name	Last commit message	Last commit date
Latest commit History 8 Commits
LICENSE		LICENSE
README.md		README.md
main.cpp		main.cpp

Repository files navigation

EtwSessionHijacking: A Poc on blocking Procmon from monitoring network events

Demo:

demo.mp4

Based On : Design Issues Of Modern EDRs: Bypassing ETW-Based Solutions

About

A Poc on blocking Procmon from monitoring network events

Report repository

Releases

No releases published

Packages

No packages published

Languages

C++ 100.0%