My name is Nedim and I'm the author of Fibratus - a modern Windows kernel tracing/exploration and runtime security threat detection engine. With Fibratus you can gain visibility into Windows kernel, collect digital evidences and conduct forensics analysis, use Python to build extensions on top of event stream or detect and disrupt advanced adversary attacks.
If you support me, I'll be able to allocate more time into bringing new features, improvements, and bug fixes, as well as prioritize the roadmap as per your feature requests. Let's democratize the EDR space together!