AURORA – Leveraging ETW for Advanced Threat Detection
![]()
Aurora is a lightweight endpoint agent that applies Sigma rules and IOCs directly to Windows system events reconstructed from Event Tracing for Windows (ETW). Unlike traditional logging tools or Sysmo …
Read more
Published Date:
Jul 31, 2025 (56 minutes ago)
Vulnerabilities has been mentioned in this article.