etw-evasion

There are 6 repositories under etw-evasion topic.

unkvolism/Fuck-Etw
Bypass the Event Trace Windows(ETW) and unhook ntdll.
Language:C89 1 112
EvilBytecode/Lifetime-Amsi-EtwPatch
Two in one, patch lifetime powershell console, no more etw and amsi!
Language:Go79 1 011
EvilBytecode/ETW-Patch
code snippet provided demonstrates how to patch the EtwEventWrite function in the ntdll.dll library on Windows using CGO (C Go).
Language:Go8 2 0
0xflux/ETW-Bypass-Rust
Event Tracing for Windows EDR bypass in Rust
Language:Rust51
Chainski/Lifetime-Amsi-EtwPatch
Loads a C# binary in memory within powershell profile, patching AMSI + ETW.
Language:Nim4 0 0
Gurpreet06/ETW-Patcher
Bypassing Event Tracing for Windows (ETW) with CSharp
Language:C++0 1 00