r/purpleteamsec

Sentinel: Userland EDR for Windows. ETW telemetry, behavioral correlation, MITRE ATT&CK