Want deeper visibility into Windows threats? This Module teaches you how to use kernel telemetry to detect stealthy attacks with confidence.
You’ll learn how to:
  • Use ETW, kernel-mode, and filtering drivers to monitor system activity
  • Spot attacker behavior by analyzing low-level telemetry data
  • Build high-fidelity detections for real-world TTPs
  • Work with complex, often undocumented OS internals
Don't have access to HTB Enterprise Platform?
Start a 14-day business trial FOR FREE →
Ready for your skills to do the talking at your next interview?
Head to HTB Academy and start learning today →
1200x675 - New Module -  Android Application Malware Analysis