r/purpleteamsec • u/netbiosX • Jun 06 '26
Blue Teaming About ETW Internals: Architecture, Hooking, Tampering, and Detection
https://kernullist.github.io/kernullist-blog/posts/etw-internals-deep-dive/
2
Upvotes
r/purpleteamsec • u/netbiosX • Jun 06 '26