Skip to content

Auditing tool that uses ETW to try and keep bad actors out

Notifications You must be signed in to change notification settings

VJMumphrey/Wonk

Repository files navigation

About

Wonk is a security tool meant for competition purposes only. This is a work in progress and NOT meant to be used in a professional setting.

It uses ETW among many things and monitors users and their actions. If a user does a bad action their session is "Wonked". This was inspired by its predecessor, Bonk, written by Kevin Oubre. It can be found here https://github.com/KevOub/bonk. This is the Windows version hence Wonk.

Further details are in the documentation

____    __    ____   ______   .__   __.  __  ___ 
\   \  /  \  /   /  /  __  \  |  \ |  | |  |/  / 
 \   \/    \/   /  |  |  |  | |   \|  | |  '  /  
  \            /   |  |  |  | |  . `  | |    <   
   \    /\    /    |  `--'  | |  |\   | |  .  \  
    \__/  \__/      \______/  |__| \__| |__|\__\ 
                                                 
                                  _
                                 \  \
             ___________________  \  \
            |         |	        |  \  \
            |         |	        |   \  \
            |         |	        |    \  \
            |_________|_________|     \  \
            |         |	        |      \  \
            |	      |	        |        \\
            |	      |	        |        \__\
            |_________|_________|

Installation

Install .net 7 x64 and compile with

dotnet build --configureation release

About

Auditing tool that uses ETW to try and keep bad actors out

Topics

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages