Detecting-Adversarial-Tradecrafts-Tools-by-leveraging-ETW

KO | EN

gitlite — search

#javascript #golang #machine-learning #deep-learning #linux #java #nodejs #windows #awesome #cli #vue #security #mcp #ios

Detecting-Adversarial-Tradecrafts-Tools-by-leveraging-ETW

(★ 51)

CyberWarFare Labs hands-on workshop on the topic "Detecting Adversarial Tradecrafts/Tools by leveraging ETW"

Detecting-Adversarial-Tradecrafts-Tools-by-leveraging-ETW 최신버젼 다운로드

최종 버전 다운로드 (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Detecting-Adversarial-Tradecrafts-Tools-by-leveraging-ETW
:warning: The workshop is still in Progress, more tools and modules will be added in the upcoming weeks as they are covered.

![This is an image](https://kajabi-storefronts-production.kajabi-cdn.com/kajabi-storefronts-production/themes/2149955815/settings_images/JRafA2iSPu2lej6WSLaN_Detecting_Adversarial_poster_1.jpg)

To setup HELK, please refer the following Video : https://drive.google.com/drive/folders/11ELLPmjHy6c3IuV9MJAlWMif0Y2kXlEq

## Workshop Outline

- [X] **ETW Basics and Setup with HELK**
- [X] **Playing around with multiple ETW Providers**
- [X] **Weaponizing ETW-TI for Detection**
- [X] **Detecting various "Defense Evasion" Techniques (PPID Spoofing)**
- [ ] **Detecting various "Defense Evasion" Techniques (Command Line Spoofing)**
- [ ] **Detecting .NET Tools and Attack Techniques (AppDomain Abuse, SharpPick etc.)**
- [ ] **Detecting LOLBAS, BYOL & BYOI Techniques**
- [ ] **Detecting Techniques leveraged by various C2 Agents**

## Tools Used 
HELK : https://github.com/Cyb3rWard0g/HELK 
SilkETW : https://github.com/mandiant/SilkETW 
Sealighter (v1.5) : https://github.com/pathtofile/Sealighter 
WEPExplorer : https://github.com/lallousx86/WinTools/tree/master/WEPExplorer 
ETW-Event-Dumper : https://github.com/woanware/etw-event-dumper

Detecting-Adversarial-Tradecrafts-Tools-by-leveraging-ETW

Detecting-Adversarial-Tradecrafts-Tools-by-leveraging-ETW 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Detecting-Adversarial-Tradecrafts-Tools-by-leveraging-ETW

Detecting-Adversarial-Tradecrafts-Tools-by-leveraging-ETW 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Download README