⤷ Title: JonMon-Lite: The Remote Agentless EDR Proof-of-Concept for ETW Trace Monitoring
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 17 Nov 2025 04:22:50 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Agentless #CybersecurityTool #DataCollectorSet #EDR #ETW #JonMonLite #ProofOfConcept #WindowsMonitoring
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 17 Nov 2025 04:22:50 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Agentless #CybersecurityTool #DataCollectorSet #EDR #ETW #JonMonLite #ProofOfConcept #WindowsMonitoring
Penetration Testing Tools
JonMon-Lite: The Remote Agentless EDR Proof-of-Concept for ETW Trace Monitoring
JonMon-Lite is a proof-of-concept "Remote Agentless EDR" that creates an ETW Trace Session to monitor Windows events, including Process Creation, DPAPI, and AMSI activity.