A collection of free miscellaneous Windows tools
☆144Jul 22, 2025Updated last year
Alternatives and similar repositories for WinTools
Users that are interested in WinTools are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Event Tracing For Windows (ETW) Resources☆440Updated this week
- Document ETW providers☆309Mar 28, 2020Updated 6 years ago
- Events from all manifest-based and mof-based ETW providers across Windows 10 versions☆344Oct 12, 2026Updated last month
- View ETW Provider manifest☆628Oct 17, 2026Updated 3 weeks ago
- KrabsETW provides a modern C++ wrapper and a .NET wrapper around the low-level ETW trace consumption functions.☆813Updated this week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Trace events in real time sessions☆47Aug 25, 2023Updated 3 years ago
- Native Development Kit for Vista 64bit And Later, by me, Based on NDK Headers 1.0, by Alex Ionescu☆17Dec 6, 2015Updated 10 years ago
- ☆852Jun 1, 2023Updated 3 years ago
- ☆212May 10, 2026Updated 6 months ago
- Sysmon-Like research tool for ETW☆397Nov 15, 2022Updated 3 years ago
- really ?☆12Feb 29, 2024Updated 2 years ago
- Sample code demonstrating use cases of the Microsoft.Windows.EventTracing NuGet package.☆54Sep 8, 2025Updated last year
- RpcView is a free tool to explore and decompile Microsoft RPC interfaces☆1,073Sep 24, 2023Updated 3 years ago
- ☆41Nov 5, 2019Updated 7 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- ☆47Jun 19, 2017Updated 9 years ago
- PowerShell scripts to aid investigators when utilizing O365 and Magnet Axiom.☆13Aug 26, 2024Updated 2 years ago
- This is a repository for reporting any issues in any of my software☆14Oct 23, 2026Updated 3 weeks ago
- Self delete DLL (2)☆14Feb 15, 2024Updated 2 years ago
- Defender for Endpoint☆28Mar 28, 2026Updated 7 months ago
- Converts any FFU into VHDX file(s)☆17Sep 21, 2024Updated 2 years ago
- Run Processes as PPL with ELAM☆184Mar 17, 2022Updated 4 years ago
- Repository of apisets☆13Jun 22, 2026Updated 4 months ago
- Useful access control entries (ACE) on system access control list (SACL) of securable objects to find potential adversarial activity☆97Feb 2, 2022Updated 4 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- SoftICE-like debugger for Windows 2000 and XP. Archived.☆21Dec 23, 2022Updated 3 years ago
- Core bypass Windows Defender and execute any binary converted to shellcode☆44Oct 12, 2021Updated 5 years ago
- Erebus is a payload generator written in Nim.☆19Jun 13, 2023Updated 3 years ago
- Prettify your PowerShell☆11Oct 26, 2022Updated 4 years ago
- Process Monitor X v2☆665Jul 4, 2026Updated 4 months ago
- Pass the Hash to a named pipe for token Impersonation☆146May 1, 2021Updated 5 years ago
- User-mode ETW interception and telemetry manipulation lab for Windows security research.☆43Oct 22, 2026Updated 3 weeks ago
- Event Tracing for Windows tools and samples☆35Nov 4, 2026Updated last week
- codes for my blog post: https://secrary.com/Random/InstrumentationCallback/☆180Nov 30, 2017Updated 8 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- $I30 INDX Carver☆18Jun 23, 2025Updated last year
- For Example. See Miro's Blog☆29Nov 26, 2022Updated 3 years ago
- ☆88Jan 12, 2022Updated 4 years ago
- VT-based PCI device monitor (SPI)☆158Oct 29, 2020Updated 6 years ago
- SysmonX - An Augmented Drop-In Replacement of Sysmon☆222Sep 17, 2019Updated 7 years ago
- ETWNetMonv3 is simple C# code for Monitoring TCP Network Connection via ETW & ETWProcessMon/2 is for Monitoring Process/Thread/Memory/Ima…☆39Jun 6, 2023Updated 3 years ago
- Cmdlets for capturing Windows Events☆14Mar 11, 2022Updated 4 years ago
Are these results useful?