Nextron AURORA

A lightweight and customisable EDR agent based on Sigma that uses Event Tracing for Windows (ETW) to recreate events that are very similar to the events generated by Microsoft’s Sysmon and applies Sigma rules and IOCs to them. It is available through an enterprise edition, and a lite version that is free of charge.

The solution is entirely on-premise and it allows users to throttle its CPU usage and event output rate. These optional throttling options allow the user to set priorities and put the system’s stability first.