Полезности
Apr. 13th, 2017 10:15 am1.
https://www.frida.re/ платформа динамической трассировки приложений
( https://www.opennet.ru/opennews/art.shtml?num=40455 описание на русском )
и очень мало публикаций, что странно для такого мощного инструмента
2.
https://github.com/rabbitstack/fibratus
A tool for exploration and tracing of the Windows kernel. It is able to capture the most of the Windows kernel activity - process/thread creation and termination, file system I/O, registry, network activity, DLL loading/unloading and much more. Fibratus has a very simple CLI which encapsulates the machinery to start the kernel event stream collector, set kernel event filters or run the lightweight Python modules called filaments.
( https://sematext.com/blog/2016/11/29/fibratus-windows-kernel-logging/ )
https://www.frida.re/ платформа динамической трассировки приложений
( https://www.opennet.ru/opennews/art.shtml?num=40455 описание на русском )
и очень мало публикаций, что странно для такого мощного инструмента
2.
https://github.com/rabbitstack/fibratus
A tool for exploration and tracing of the Windows kernel. It is able to capture the most of the Windows kernel activity - process/thread creation and termination, file system I/O, registry, network activity, DLL loading/unloading and much more. Fibratus has a very simple CLI which encapsulates the machinery to start the kernel event stream collector, set kernel event filters or run the lightweight Python modules called filaments.
( https://sematext.com/blog/2016/11/29/fibratus-windows-kernel-logging/ )

