GitHub repository: tigr0w/nettitude_ETWHash
Description: C# POC to extract NetNTLMv1/v2 hashes from ETW provider