News for hackers. Stuff that matters.

A comment on A modern tool for the Windows kernel exploration and observability.

Re:A modern tool for the Windows kernel exploration and obse... by collsni on Saturday December 05, 2020 @09:48AM (#25314914)
Looks like sysmon
[ Parent | on HN ]
Re:A modern tool for the Windows kernel exploration and obse... by archrabbit on Saturday December 05, 2020 @04:15PM (#25318446)
Besides it is: - fully programmable and extensible with Python scripts - has out of the box alerting - support for capture files - highly customizable regarding transporting events to output sinks
[ Parent | on HN ]
Re:A modern tool for the Windows kernel exploration and obse... by shawnz on Saturday December 05, 2020 @11:03AM (#25315494)
Or alternatively the gui-based procmon
[ Parent | on HN ]