procmon
There are 21 repositories under procmon topic.
Accenture/Spartacus
Spartacus DLL/COM Hijacking Toolkit
wecooperate/iMonitor
iMonitor(冰镜 - 终端行为分析系统)
wecooperate/iMonitorSDK
The world's most powerful System Activity Monitor Engine · 一款功能强大的终端行为采集防御开发套件 ~ 旨在帮助EDR、零信任、数据安全、审计管控等终端安全软件可以快速实现产品功能, 而不用关心底层驱动的开发、维护和兼容性问题,让其可以专注于业务开发
progmboy/openprocmon
open source process monitor
eronnen/procmon-parser
Parser to process monitor file formats
kfiros/execmon
Advanced process execution monitoring utility for linux (procmon like)
bitranox/fingerprint
Monitoring Registry and File Changes in Windows
wuanzhuan/system_monitor
Monitor windows kernel event, based on etw, development in rust. A replacement of procmon. more events and useful filter. Typically can check handle leak for a few weeks.
dotnetos/diagnosticsexpert-course
Materials for Diagnostics Expert online course
lowleveldesign/send2procmon
A command line tool that sends its input data to a running procmon instance.
viorelyo/Procmonel
Procmonel is Procmon like monitoring system implemented using Microsoft WDK
rootVIII/monproc
Process Monitor for Debian Linux Distros. Monitor CPU Utilization
asquigglytwist/SeeBee
A PML Analyzer.
false00/packetTrail
Associates netflow data with system processes and logs to syslog
noam242/GuardCode
Repo for the project GuardCode.
debilsyka/ProcMonDebugOutput
See Your Trace Statements in Process Monitor!
sergiovks/Procmon-PrivEsc-LateralMovement
The procmon script is used to monitorize commands that were ran or will run on the system, in order to make privilege escalation and lateral movement on a Linux target.
e-war/LSTMalware
A LSTM (Long Short Term Memory) model + dataset. Utilises the procmon logging system to analyze malware/virus process activity in the form of binary classification [malicious/benign]. Created for my University final project.
hansalemaos/procmondf
provides a convenient and efficient solution for capturing and analyzing system activity logs using Procmon and converting them to the pandas compatible Parquet file format (2% of the original pml file size)
Psmths/ingest-procmon
Python script to index SysInternals procmon CSV exports into elasticsearch