328 matches found
sysmon-config
sysmon-config | 모두가 포크할 수 있는 Sysmon 설정 파일 이것은 기본 고급 이벤트 추적 기능을 갖춘 Microsoft Sysinternals Sysmon 설정 파일 템플릿입니다. 이 파일은 자체 포함되고 접근 가능한 패키지로 시스템 변경 모니터링을 위한 훌륭한 시작점 역할을 해야 합니다. 이 설정과 결과를 통해 Sysmon으로 무엇이 가능한지 잘 알 수 있을 것입니다. 참고로, 이 설정은 인증 및 사고 조사에 중요한 기타 Windows 이벤트와 같은 항목을 추적하지 않습니다...
CVE-2021-34486
CVE-2021-34486 Windows ETW 권한 상승LPE Windows 20H2 x64에서만 테스트됨 ed2k://|file|cnwindows10businesseditionsversion20h2updatedmarch2021x64dvdca61aaaa.iso|6074574848|B6741C4E4B09337471B02DC95E953992|/ @yongchuank 님 감사합니다 https://www.pixiepointsecurity.com/blog/advisory-cve-2021-34486.html...
pywintrace
ETW Event Tracing for Windows ETW は、ユーザーがイベントをファイルまたはバッファに記録できるようにするトレース機能です。ETW...
Fuck-Etw
「⚙️」ETWバイパス & Ntdllアンフッキング Event Trace WindowsETWをバイパスし、ntdllのフックを解除します。 root@kitploit: |\ /| | \ /\ \ /|\ /| | /| || /| \ / /| / | | | | | | || | | / / | | | | | | | | | | | || | | | | | | | | | | | | | || | | \ \ | | | | || || | | | || /| / \ | /\ | | | | |/ /|/ // Made by sorahed v1.0 i...
New Avalon Malware Framework Packs CrownX Ransomware Capabilities
Cybersecurity researchers have discovered a previously undocumented modular malware framework codenamed Avalon that's distributed by means of a multi-stage phishing chain capable of bypassing traditional security controls. Avalon combines credential collection, lateral movement, remote access,...
EUVD-2026-34742
Integer overflow in Chromoting in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted ETW event. Chromium security severity: Low...
DEBIAN-CVE-2026-11281
Integer overflow in Chromoting in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted ETW event. Chromium security severity: Low...
CVE-2026-11281
Integer overflow in Chromoting in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted ETW event. Chromium security severity: Low...
CVE-2026-11281
Integer overflow in Chromoting in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted ETW event. Chromium security severity: Low...
Endpoint Security Agent: A Comprehensive Approach to Real-Time System Monitoring and Threat Detection
As cyber threats continue to evolve in complexity and frequency, robust endpoint protection is essential for organizational security. This paper presents "Endpoint Security Agent: A Comprehensive Approach to Real-time System Monitoring and Threat Detection" a modular, real-time security solution...
EUVD-2021-18844
Malware in sbrugna...
EUVD-2021-13656
Malware in sbrugna...
EUVD-2021-13859
Malware in sbrugna...
EUVD-2021-13230
Malware in sbrugna...
EUVD-2021-11019
Malware in sbrugna...
EUVD-2021-15114
Malware in sbrugna...
EUVD-2021-20451
Malware in sbrugna...
EUVD-2021-23540
Malware in sbrugna...