
mimikatz-detector-condrv
The Console Monitor Driver is a KMDF kernel-mode filter driver that captures certain Fast I/O operations (input and output) that is sent to or from…
anomaly-detectiondefensive-toolsincident-response+3

The Console Monitor Driver is a KMDF kernel-mode filter driver that captures certain Fast I/O operations (input and output) that is sent to or from…

ETW-based Windows process creation logger that enriches events with file hashes, signatures, and parent process details, outputting to Windows…