https://cybertoolchain.io/tools/drakvuf New releases and features in DRAKVUF, tracked by The Cyber Toolchain. en Thu, 29 Dec 2022 17:21:45 GMT https://github.com/tklengyel/drakvuf/releases/tag/1.0 https://github.com/tklengyel/drakvuf/releases/tag/1.0 Thu, 29 Dec 2022 17:21:45 GMT DRAKVUF 1.0 adds Meson build support and seven new community plugins • Adds `SprayMon` plugin for monitoring spray operations. • Adds `CallbackMon` plugin for monitoring callback registrations. • Adds `HideVM` plugin for detecting virtual machine hiding techniques. • Adds `PTraceMon` plugin for monitoring ptrace syscalls. • Adds `EBPFMon` plugin for monitoring eBPF programs and maps. • Adds `UnixSocketMon` plugin for monitoring Unix domain sockets. • Adds `ETWMon` plugin for monitoring Event Tracing for Windows. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/drakvuf https://github.com/tklengyel/drakvuf/releases/tag/0.8 https://github.com/tklengyel/drakvuf/releases/tag/0.8 Tue, 21 Dec 2021 14:54:41 GMT DRAKVUF 0.8 introduces nine new plugins including codemon, hidsim, and filetracer for Linux. • Adds `codemon` plugin for capturing memory dumps from running processes. • Adds `hidsim` plugin for simulating host intrusion detection events. • Adds `filetracer` plugin support for Linux guests. • Adds `procdump2` plugin for process memory dumping with improved capabilities. • Adds `tlsmon` plugin for monitoring TLS traffic within VMs. • Adds `rpcmon` plugin for monitoring Remote Procedure Call activity. • Adds `rootkitmon` plugin for detecting rootkits via hook monitoring. • Adds `exploitmon` plugin for identifying exploit patterns in real-time. • Adds `ipt` plugin for IP Trace Table monitoring. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/drakvuf