0xeb / WinToolsLinks
A collection of free miscellaneous Windows tools
☆140Updated 4 months ago
Alternatives and similar repositories for WinTools
Users that are interested in WinTools are comparing it to the libraries listed below
Sorting:
- API Set Viewer☆90Updated 10 months ago
- Events from all manifest-based and mof-based ETW providers across Windows 10 versions☆319Updated last year
- ☆63Updated last year
- Sysmon-Like research tool for ETW☆370Updated 3 years ago
- A PowerShell module to facilitate building, configuring, deploying, and auditing Windows Defender Application Control (WDAC) policies☆229Updated 3 years ago
- Run any executable as SYSTEM account (no service required)☆138Updated last year
- RPC Monitor tool based on Event Tracing for Windows☆376Updated last year
- This tool is the result of a reverse engineering process of the Windows service called SysMain. Time to interact with the prefetch files …☆32Updated 5 years ago
- Parser to process monitor file formats☆154Updated 2 months ago
- CallMon is an experimental system call monitoring tool that works on Windows 10 versions 2004+ using PsAltSystemCallHandlers☆144Updated 5 years ago
- DotNext 2019 St. Petersburg Talk Demos☆39Updated 6 years ago
- Run Processes as PPL with ELAM☆173Updated 3 years ago
- Expand compressed files from WinSxS folder☆166Updated 5 months ago
- Analysis and manipulation of extended attribute ($EA) on NTFS☆38Updated 10 years ago
- A PowerShell module to assist in parsing and managing catalog files.☆22Updated 8 years ago
- Document ETW providers☆264Updated 5 years ago
- A WinDbg extension to trace COM interactions☆122Updated 3 months ago
- View ETW Provider manifest☆550Updated last year
- WNF Utilities 4 Newbies (WNFUN)☆98Updated 7 years ago
- Security testing tools for Windows sandboxing technologies☆179Updated 7 months ago
- Windows System Programming Experiments☆222Updated 3 years ago
- Documentation and supporting script sample for Windows Exploit Guard☆161Updated 3 months ago
- BITS Transfers Manager☆44Updated 6 months ago
- Named pipe I/O ETW provider for Windows☆71Updated 5 years ago
- Enhanced version of the classic Spy++ tool☆215Updated 2 months ago
- Lnk file parser☆90Updated 6 months ago
- File system minifilter driver for Windows to block symbolic link attacks.☆52Updated 4 years ago
- Leverage AMSI (Antimalware Scan Interface) technology to aid your analysis. This tool saves all buffers (scripts, .NET assemblies, etc) …☆112Updated 4 years ago
- ☆29Updated 3 years ago
- Kernel Pool Monitor☆127Updated 3 years ago