Awesome
SilkETW & SilkService
The BlackHat Arsenal abstract is available here: https://www.blackhat.com/us-19/arsenal/schedule/index.html#silketw-collecting-actionable-etw-data-16729
The BlackHat Arsenal abstract is available here: https://www.blackhat.com/us-19/arsenal/schedule/index.html#silketw-collecting-actionable-etw-data-16729