All Projects → rabbitstack → Fibratus

rabbitstack / Fibratus

Licence: other
A modern tool for the Windows kernel exploration and tracing

Programming Languages

python
139335 projects - #7 most used programming language
go
31211 projects - #10 most used programming language
golang
3204 projects

Projects that are alternatives of or similar to Fibratus

Frida Core
Frida core library intended for static linking into bindings
Stars: ✭ 398 (-63.95%)
Mutual labels:  instrumentation
Molten
php probe for zipkin and opentracing
Stars: ✭ 740 (-32.97%)
Mutual labels:  instrumentation
Likwid
Performance monitoring and benchmarking suite
Stars: ✭ 957 (-13.32%)
Mutual labels:  instrumentation
Byte Buddy
Runtime code generation for the Java virtual machine.
Stars: ✭ 4,655 (+321.65%)
Mutual labels:  instrumentation
Event bus
🏄 Traceable, extendable and minimalist **event bus** implementation for Elixir with built-in **event store** and **event watcher** based on ETS.
Stars: ✭ 563 (-49%)
Mutual labels:  instrumentation
Aws Xray Ts Decorator
Instrument your Typescript code with AWS X-Ray using elegant decorators
Stars: ✭ 17 (-98.46%)
Mutual labels:  instrumentation
Frida Gum
Cross-platform instrumentation and introspection library written in C
Stars: ✭ 357 (-67.66%)
Mutual labels:  instrumentation
Kanela
The Kamon Instrumentation Agent
Stars: ✭ 45 (-95.92%)
Mutual labels:  instrumentation
Telemetry
Dynamic dispatching library for metrics and instrumentations.
Stars: ✭ 647 (-41.39%)
Mutual labels:  instrumentation
Insights.py
AppetizerIO CLI for Mobile DevOps Development
Stars: ✭ 26 (-97.64%)
Mutual labels:  instrumentation
Zipkin Go Opentracing
OpenTracing Bridge for Zipkin Go
Stars: ✭ 472 (-57.25%)
Mutual labels:  instrumentation
Kcov
Code coverage tool for compiled programs, Python and Bash which uses debugging information to collect and report data without special compilation options
Stars: ✭ 515 (-53.35%)
Mutual labels:  instrumentation
Microservices Observability
This project is a demonstration on how to instrument, monitor and trace applications using java frameworks and open-source tools like prometheus, grafana and jaeger.
Stars: ✭ 23 (-97.92%)
Mutual labels:  instrumentation
Zipkin Go
Zipkin tracer library for go
Stars: ✭ 435 (-60.6%)
Mutual labels:  instrumentation
Node Opcua
an implementation of a OPC UA stack fully written in javascript and nodejs - http://node-opcua.github.io/
Stars: ✭ 985 (-10.78%)
Mutual labels:  instrumentation
Sqlhooks
Attach hooks to any database/sql driver
Stars: ✭ 397 (-64.04%)
Mutual labels:  instrumentation
Qbdi
A Dynamic Binary Instrumentation framework based on LLVM.
Stars: ✭ 801 (-27.45%)
Mutual labels:  instrumentation
Frida Snippets
Hand-crafted Frida examples
Stars: ✭ 1,081 (-2.08%)
Mutual labels:  instrumentation
Scalopus
A tracing framework for C++ and Python.
Stars: ✭ 41 (-96.29%)
Mutual labels:  instrumentation
Traute
Enhances java sources compilation in a way to insert null-checks into generated *.class files
Stars: ✭ 26 (-97.64%)
Mutual labels:  instrumentation

Fibratus

Fibratus

A modern tool for the Windows kernel exploration and observability
Get Started »

Docs   •   Filaments   •   Download   •   Discussions

What is Fibratus?

Fibratus is a tool for exploration and tracing of the Windows kernel. It lets you trap system-wide events such as process life-cycle, file system I/O, registry modifications or network requests among many other observability signals. In a nutshell, Fibratus allows for gaining deep operational visibility into the Windows kernel but also processes running on top of it.

Events can be shipped to a wide array of output sinks or dumped to capture files for local inspection and forensics analysis. The powerful filtering engine permits drilling into the event flux entrails.

You can use filaments to extend Fibratus with your own arsenal of tools and so leverage the power of the Python ecosystem.

Features

  • ⚡️ blazing fast
  • 📡 collects a wide spectrum of kernel events - from process to network observability signals
  • 🔍 super powerful filtering engine
  • 🐍 running Python scriptlets on top of kernel event flow
  • 💽 capturing event flux to kcap files and replaying anywhere
  • 🚀 transporting events to Elasticsearch, RabbitMQ or console sinks
  • ✂️ transforming kernel events
  • 🐞 scanning malicious processes and files with Yara
  • 📁 PE (Portable Executable) introspection

Documentation


Setup

Events

Filters

Captures

Filaments

Outputs

Transformers

Alerts

PE (Portable Executable)

YARA

Troubleshooting


Developed with ❤️ by Nedim Šabić Šabić

Logo designed with ❤️ by Karina Slizova

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].