41554 blogs · 4,417,066 posts Claim your blog

Record · corpus.blog/posts/01a08751-d721-725a-bcac-9325038bf9d6

In-depth Windows Telemetry

blog.otterpwn.com · published 13 April 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at blog.otterpwn.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 8
Words captured: 4,790

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://www.edr-telemetry.com/windows

edr-telemetry.com

https://www.vergiliusproject.com/kernels/x64/windows-11/24h2/_ETW_SILODRIVERSTATE

vergiliusproject.com

https://www.vergiliusproject.com/kernels/x64/windows-11/24h2/_WMI_LOGGER_CONTEXT

vergiliusproject.com

https://www.vergiliusproject.com/kernels/x64/windows-11/24h2/_ETW_GUID_ENTRY

vergiliusproject.com

https://www.ired.team/miscellaneous-reversing-forensics/windows-kernel-internals/subscribing-to-process-creation-thread-creation-and-image-load-notifications-from-a-kernel-driver

ired.team

https://learn.microsoft.com/en-us/windows/win32/api/winbase/nf-winbase-createfilemappinga

learn.microsoft.com

https://learn.microsoft.com/en-us/windows/win32/procthread/fibers

learn.microsoft.com

https://www.safebreach.com/blog/process-injection-using-windows-thread-pools/

safebreach.com