> ETW internals for security research and forensics
[DATE: 22/11/2023 12:00]
[LANGUAGE: EN]
Why has Event Tracing for Windows (ETW) become so pivotal for endpoint detection and response (EDR) solutions in Windows 10 and 11? The answer lies in the value of the intelligence it provides to security tools through secure ETW channels, which are now also a target for offensive researchers looking to bypass […]