John U
|
cdb4d914d2
|
Update README.md
|
2024-07-26 17:07:58 +08:00 |
|
John Uhlmann
|
5d4b4224c2
|
update README
|
2024-07-26 16:55:34 +08:00 |
|
John Uhlmann
|
f276acfcda
|
update ntoskrnl.exe.csv
|
2024-07-26 16:48:49 +08:00 |
|
John Uhlmann
|
c93afeea75
|
make search depth adaptive
|
2024-07-26 16:48:24 +08:00 |
|
John Uhlmann
|
449a908d8e
|
update defaults
|
2024-07-24 15:23:28 +08:00 |
|
John Uhlmann
|
51a8b009de
|
add kernel legacy event support
|
2024-07-24 10:41:23 +08:00 |
|
John Uhlmann
|
11a7046d82
|
update ntoskrnl.exe.csv
|
2024-07-12 16:50:19 +08:00 |
|
John Uhlmann
|
b32f8198c5
|
tracelogging wip
|
2024-07-12 16:50:19 +08:00 |
|
John Uhlmann
|
35eb61cd12
|
TLG WIP
|
2024-04-28 13:04:16 +08:00 |
|
John Uhlmann
|
58c1d8b96d
|
update to Ghidra 11
|
2024-04-24 20:36:20 +08:00 |
|
John U
|
943db12ffc
|
added a C header file with all of the ETW function signatures that ghidra needs
|
2020-08-18 16:54:50 +10:00 |
|
John U
|
03eb5f4514
|
added partial classic provider support (especially WPP)
|
2020-07-26 20:56:52 +10:00 |
|
John U
|
67973bf8fa
|
v0.1
|
2020-07-26 20:56:52 +10:00 |
|
John U
|
652a0d5efc
|
Initial commit
|
2020-05-23 18:37:50 +10:00 |
|