This DRAKVUF plugin enables VMI-based monitoring of emitted ETW events (Event Tracing for Windows).
-
Updated
Jun 17, 2026 - C++
This DRAKVUF plugin enables VMI-based monitoring of emitted ETW events (Event Tracing for Windows).
This DRAKVUF plugin implements VMI-based YARA scanning over virtual process address spaces.
HypErSIS DRAKVUF is a fork from the official DRAKVUF software (https://github.com/tklengyel/drakvuf) by Tamas K Lengyel (@tklengyel). This fork repository contains a number of modifications, improvements, and plugin extensions that we have made to DRAKVUF as part of the HypErSIS research project.
Sandbox agentless de análise de malware (DRAKVUF + Wazuh + ClamAV) para detecção de ameaças evasivas via introspecção de VM (VMI).
Add a description, image, and links to the drakvuf topic page so that developers can more easily learn about it.
To associate your repository with the drakvuf topic, visit your repo's landing page and select "manage topics."