Sign in
← Back to search
github Actively maintained

0xjbb/EyYoEtwWhereYouAt

Correlating kernel notifications with the lack of ETW events to detect ETW Patching

1 awesome list

Quick read

Stars
7
Forks
3
Open issues
0
Commits
1

Activity and growth

Latest capture 2026-08-31 03:03

Stars · last 7 days
No history
Commits · last 7 days
No history
Stars since tracking
0
Stored snapshots
4

Classification

Topics

#amsi-bypass #blue-team #blue-team-tool #detection #detection-engineering #etw #event-tracing #hardware-breakpoint #hooking #hwbp #hwbp-evasion #inline #inline-patching #patching #red #red-team #red-team-tools #red-teaming #team

Metadata

Language
C++
Default branch
main
Created
2026-01-23
First commit
2026-03-14
Last pushed
2026-03-14
GitHub updated
2026-08-28
Last synced
2026-08-31 03:03
Stack scanned
2026-08-31 03:03
Archived
No
Sign in to like 0xjbb/EyYoEtwWhereYouAt
README View on GitHub

AI development signals

0 paths

Agent instructions and tool configuration found in this repository.

No config files detected.

Growth history

Tracked growth

4 observed captures since 2026-06-24. Observed captures are shown by default.

Stars from first capture 0

Chart data

Observed captures only

Time horizon

All tracked data

Custom date range

Stars history

Observed snapshots

Commits history

Observed snapshots

Similar repositories

Nearest indexed repositories by embedding similarity.

0xJs/BYOVD_EDRKiller

Proof of Concepts code for Bring Your Own Vulnerable Driver techniques

116 stars
C 1 awesome list

Idov31/EtwLeakKernel

Leaking kernel addresses from ETW consumers. Requires Administrator privileges.

94 stars
C++ 1 awesome list

br-sn/CheekyBlinder

Enumerating and removing kernel callbacks using signed vulnerable drivers

592 stars
C++ 1 awesome list

0xDbgMan/DrvEye

Static analysis & exploitation-triage toolkit for Windows kernel drivers. Discover IOCTLs, Symbolic Links, and check cert , and Downlaods BYOVD

199 stars
Python 1 awesome list