A weak Windows registry ACL turns a scheduled task and a symlink into a SYSTEM-level write primitive. https://intel.threadlinqs.com/threat/TL-2026-2480 #ThreatIntel #CVE_2025_59201 #Windows10 #EtwExplorer
September 13, 2026 at 5:54 PM
A weak Windows registry ACL turns a scheduled task and a symlink into a SYSTEM-level write primitive. https://intel.threadlinqs.com/threat/TL-2026-2480 #ThreatIntel #CVE_2025_59201 #Windows10 #EtwExplorer
The project is heavily inspired by
Pavel Yosifovich 's excellent EtwExplorer. The goal is to build a broader ETW workbench for provider discovery, live collection, ETL inspection, filtering, SQL-style analysis, export, and the workflows around them.
Pavel Yosifovich 's excellent EtwExplorer. The goal is to build a broader ETW workbench for provider discovery, live collection, ETL inspection, filtering, SQL-style analysis, export, and the workflows around them.
June 15, 2026 at 8:44 PM
The project is heavily inspired by
Pavel Yosifovich 's excellent EtwExplorer. The goal is to build a broader ETW workbench for provider discovery, live collection, ETL inspection, filtering, SQL-style analysis, export, and the workflows around them.
Pavel Yosifovich 's excellent EtwExplorer. The goal is to build a broader ETW workbench for provider discovery, live collection, ETL inspection, filtering, SQL-style analysis, export, and the workflows around them.