ET_Ducky-Desktop is a Windows diagnostic and troubleshooting application built on top of Event Tracing for Windows (ETW). It provides real-time visibility into system behavior including file activity, registry writes, process launches, and more in a clear and searchable UI. The application is designed for power users, system administrators, developers, SOC/IR roles, and anyone who needs deeper visibility into what their system is doing. Feel free to take a look at my website to download the desktop app for free. Try out the BYOK option or subscribe for queries. Any subscription comes with 10 free agents, enabling alerting, remote control, file transfers, remote powershell, and more.

https://etducky.com