Overview What is Fibratus? Setup Installation Running Configuration Events Anatomy Of An Event Process Thread Image File Registry Network Handle Filters Needle In The Haystack Prefiltering Filtering Operators Paths Functions Fields Rules Captures Immortalizing The Event Flux Capturing Replaying Filaments Python Meets Kernel Events Executing Internals Writing Filaments Outputs Transporting Kernel Events Console Null RabbitMQ Elasticsearch HTTP Eventlog Transformers Parsing, Enriching, Transforming Remove Rename Replace Tags Trim Alerts Watchdogging Kernel Events Alert Senders Mail Slack Filament Alerting PE Portable Executable Introspection Sections Symbols Resources Yara Pattern Matching Swiss Knife Scanning Processes Alerts Troubleshooting Logs Stats Profiling