Tools for Research and Detection

1. ETW Monitoring: Logman, xperf, ETWExplorer, SilkETW

2. Syscall Analysis: Sysmon, Procmon, strace, Syscall2name

3. Callback Detection: Windbg, PE-sieve, EDRSandblast, KProcessHacker