SilkETW

SilkETW and SilkService are C# wrappers designed to simplify the usage of Event Tracing for Windows (ETW), primarily serving as research tools for both offensive and defensive cybersecurity applications. These tools enable users to perform data collection, analysis, and introspection with outputs serialized in JSON format, which can be easily integrated with local PowerShell analysis or external systems like Elasticsearch. Notable features include straightforward command line usage and support for running ETW collection headlessly with multiple sources simultaneously through SilkService.