0xeb / WinToolsLinks
A collection of free miscellaneous Windows tools
☆137Updated last month
Alternatives and similar repositories for WinTools
Users that are interested in WinTools are comparing it to the libraries listed below
Sorting:
- API Set Viewer☆92Updated 7 months ago
- Events from all manifest-based and mof-based ETW providers across Windows 10 versions☆308Updated last year
- Expand compressed files from WinSxS folder☆161Updated last month
- CallMon is an experimental system call monitoring tool that works on Windows 10 versions 2004+ using PsAltSystemCallHandlers☆146Updated 4 years ago
- ☆63Updated last year
- DotNext 2019 St. Petersburg Talk Demos☆40Updated 6 years ago
- Parser to process monitor file formats☆149Updated 2 years ago
- Document ETW providers☆246Updated 5 years ago
- This tool is the result of a reverse engineering process of the Windows service called SysMain. Time to interact with the prefetch files …☆31Updated 4 years ago
- Sysmon-Like research tool for ETW☆364Updated 2 years ago
- Named pipe I/O ETW provider for Windows☆71Updated 5 years ago
- WNF Utilities 4 Newbies (WNFUN)☆96Updated 6 years ago
- Run Processes as PPL with ELAM☆167Updated 3 years ago
- Lnk file parser☆88Updated 2 months ago
- A WinDbg extension to trace COM interactions☆121Updated last week
- RPC Monitor tool based on Event Tracing for Windows☆369Updated last year
- A PowerShell module to facilitate building, configuring, deploying, and auditing Windows Defender Application Control (WDAC) policies☆224Updated 3 years ago
- Library and tools to access the Windows Prefetch File (SCCA) format.☆78Updated 7 months ago
- Enhanced version of the classic Spy++ tool☆208Updated last year
- Run any executable as SYSTEM account (no service required)☆137Updated last year
- Windows Registry Knowledge Base☆180Updated 10 months ago
- ☆28Updated 2 years ago
- Security testing tools for Windows sandboxing technologies☆175Updated 3 months ago
- View ETW Provider manifest☆526Updated 9 months ago
- PE Viewer☆193Updated 3 weeks ago
- ☆68Updated 3 years ago
- Explore Kernel Objects on Windows☆223Updated 4 months ago
- Windows Drivers☆99Updated 6 years ago
- Leverage AMSI (Antimalware Scan Interface) technology to aid your analysis. This tool saves all buffers (scripts, .NET assemblies, etc) …☆110Updated 4 years ago
- Metadata hash incorporating the Rich Header for robustness against packing and other malware tricks☆67Updated 4 years ago