AURORA – Leveraging ETW for Advanced Threat Detection

AURORA – Leveraging ETW for Advanced Threat Detection

Aurora is a lightweight endpoint agent that applies Sigma rules and IOCs directly to Windows system events reconstructed from Event Tracing for Windows (ETW). Unlike traditional logging tools or Sysmo …
Read more


Published Date:
Jul 31, 2025 (56 minutes ago)

Vulnerabilities has been mentioned in this article.

Share the Post:

Related Posts