Fibratus is a tool which is able to capture the most of the Windows kernel activity - process/thread creation and termination, file system I/O, registry, network activity, DLL loading/unloading and much more. Fibratus has a very simple CLI which encapsulates the machinery to start the kernel event stream collector, set kernel event filters or run the lightweight Python modules called filaments. You can use filaments to extend Fibratus with your own arsenal of tools.
1 maintainer
Metadata
1 maintainer
Release files for fibratus 0.7.2
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| fibratus-0.7.2.tar.gz | 213.6 kB | Details |
Release files / fibratus-0.7.2.tar.gz
| Download URL | fibratus-0.7.2.tar.gz |
|---|---|
| Size | 213.6 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
7c6ceab4bf90b4cc509b03cad69ad60865fb79183579c1feb4658169902e754c
|
|
BLAKE2b-256 checksum How to use checksums |
dad9b8a8090636c3fd7e29e73dc7427bad70739aca3891a6c4d0d1fdb28df772
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
