Add: DamonMohammadbagher/ETWProcessMon2 to DFIR section

This commit is contained in:
pe3zx 2021-07-09 06:57:06 +07:00
parent 03b91467fe
commit f60971d063

View File

@ -1200,6 +1200,10 @@ This repository is created as an online bookmark for useful links, resources and
<td><a href="https://github.com/CyberDefenseInstitute/CDIR">CyberDefenseInstitute/CDIR</a></td>
<td>CDIR (Cyber Defense Institute Incident Response) Collector - live collection tool based on oss tool/library</td>
</tr>
<tr>
<td><a href="https://github.com/DamonMohammadbagher/ETWProcessMon2">DamonMohammadbagher/ETWProcessMon2</a></td>
<td>ETWProcessMon2 is for Monitoring Process/Thread/Memory/Imageloads/TCPIP via ETW + Detection for Remote-Thread-Injection etc.</td>
</tr>
<tr>
<td><a href="https://github.com/davehull/Kansa">davehull/Kansa</a></td>
<td>A Powershell incident response framework</td>