Alternatives and similar repositories for udmp-parser

Users that are interested in udmp-parser are comparing it to the libraries listed below

• ioncodes / ceload
  BYOVD: Loading dbk64.sys and grabbing a handle to it
  ☆161Updated 3 years ago
• 0vercl0k / kdmp-parser
  A Windows kernel dump C++ parser library with Python 3 bindings.
  ☆213Updated 2 months ago
• ajkhoury / ApiSet
  API Set resolver for Windows
  ☆141Updated last year
• Signal-Labs / IOCTLDump
  ☆148Updated 2 years ago
• yardenshafir / PoolViewer
  An application to view and filter pool allocations from a dmp file on Windows 10 RS5+.
  ☆146Updated 2 years ago
• mrexodia / phnt-single-header
  Single header version of System Informer's phnt library.
  ☆237Updated last week
• Fyyre / DrvMon
  Advanced driver monitoring utility.
  ☆217Updated 3 years ago
• KiFilterFiberContext / warbird-hook
  Using Microsoft Warbird to automatically unpack and execute encrypted shellcode in ClipSp.sys without triggering PatchGuard
  ☆257Updated 3 years ago
• 0xcpu / WinAltSyscallHandler
  Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999
  ☆237Updated 6 years ago
• alexander-hanel / msdocsviewer
  msdocsviewer is a simple tool that parses Microsoft's win32 API and driver documentation to be used within IDA.
  ☆156Updated last year
• repnz / apc-research
  APC Internals Research Code
  ☆168Updated 5 years ago
• DownWithUp / ALPC-Example
  An example of a client and server using Windows' ALPC functions to send and receive data.
  ☆114Updated 11 months ago
• kkent030315 / NtSymbol
  Resolve DOS MZ executable symbols at runtime
  ☆96Updated 4 years ago
• csandker / InterProcessCommunication-Samples
  Some Code Samples for Windows based Inter-Process-Communication (IPC)
  ☆206Updated last year
• diversenok / DiaSymbolView
  PDB file inspection tool
  ☆116Updated last month
• JustasMasiulis / wow64pp
  A modern c++ implementation of windows heavens gate
  ☆240Updated 5 years ago
• yardenshafir / IoRingReadWritePrimitive
  Post exploitation technique to turn arbitrary kernel write / increment into full read/write primitive on Windows 11 22H2
  ☆246Updated 3 years ago
• Dump-GUY / IDA_PHNT_TYPES
  Converted phnt (Native API header files from the System Informer project) to IDA TIL, IDC (Hex-Rays).
  ☆158Updated last year
• tandasat / hvext
  The Windbg extensions to study Hyper-V on Intel and AMD processors.
  ☆168Updated 3 months ago
• wbenny / EtwConsumerNT
  Simple project that demonstrates how an ETW consumer can be created just by using NTDLL
  ☆146Updated 6 years ago
• DownWithUp / CallMon
  CallMon is an experimental system call monitoring tool that works on Windows 10 versions 2004+ using PsAltSystemCallHandlers
  ☆144Updated 5 years ago
• enkomio / thematrix
  a PE Loader and Windows API tracer. Useful in malware analysis.
  ☆143Updated 3 years ago
• mrexodia / AppInitHook
  Global user-mode hooking framework, based on AppInit_DLLs. The goal is to allow you to rapidly develop hooks to inject in an arbitrary pr…
  ☆182Updated 3 years ago
• yardenshafir / InformationClasses
  Documenting system information classes and their uses
  ☆56Updated 4 years ago
• Microwave89 / createuserprocess
  Three Tiny Examples of Directly Using Vista's NtCreateUserProcess
  ☆89Updated 10 years ago
• magnusstubman / dll-exports
  Collection of DLL function export forwards for DLL export function proxying
  ☆107Updated 4 months ago
• d35ha / xLogger
  Simple windows API logger
  ☆109Updated 6 years ago
• BehroozAbbassi / sdkffi
  A code parser for C-Style header files that lets you to parse function's prototypes and data types used in their parameters.
  ☆94Updated 3 years ago
• mandiant / STrace
  A DTrace on Windows Reimplementation
  ☆366Updated 2 months ago
• SinaKarvandi / Process-Magics
  This is a collection of interesting codes about Windows Process creation.
  ☆238Updated last year