SilkETW is a flexible tool aimed to reduce the complexities of ETW(Event Tracing for Windows) and to put actionable data in the hands of researches on both the defensive and offensive side. ETW is a kernel-level tracing facility that allows tracing the kernel logs or application-defined events logs.

Read full news article on GBHackers