Alternatives and similar repositories for woflib

Users that are interested in woflib are comparing it to the libraries listed below

• ZaneLogi / DevConWin
  A tool to investigate the Windows device manager
  ☆12Updated 6 years ago
• BrunoMCBraga / Kernel-Whisperer
  ☆29Updated 4 years ago
• noelmartinon / ExecAs
  Command line utility that executes a command (plaintext or encryted) as another user account or under specified user session
  ☆18Updated 6 years ago
• JokerMars / MiniEngine
  Final Transparent encrypted version
  ☆14Updated 8 years ago
• 474172261 / DataProtector
  A simple ransomware defender.It uses minifilter to filt "rewrite" and "delete" events in kernel.And it handles event in user mode.
  ☆27Updated 7 years ago
• prash-wghats / Dtrace-ETW
  DTrace for Windows in userspace; Frontend to ETW
  ☆27Updated 3 years ago
• ETEFS / ETEFS_Mini
  Easy Transparent Encrypted File System Based on Minifilter File System Driver
  ☆35Updated 3 months ago
• zodiacon / ObjDir
  Simple command line version of Sysinternals WinObj. Currently just lists object names and types given an object manager directory.
  ☆21Updated 2 years ago
• KelvinMsft / ScreenCapAttack
  ☆35Updated 5 years ago
• xue-blood / tdifw
  copy of tdifw lib
  ☆10Updated 8 years ago
• Zurdo136 / OCD
  Windows Offline Crash Dump
  ☆17Updated 3 years ago
• jnastarot / soul_eater
  it can extract functions from .dll, .exe, .sys and it be work! :)
  ☆40Updated 6 years ago
• stonedreamforest / Tstl
  The kernel mode Standard Template Library Template
  ☆19Updated 5 years ago
• guidoreina / http_inspect
  HTTP/HTTPS/DNS inspector (windows driver)
  ☆27Updated 6 years ago
• amiryeshurun / HyperWin-Communication-Driver
  A driver that supports communication between a Windows guest and HyperWin
  ☆15Updated 4 years ago
• russellklenk / ETW
  Event Tracing for Windows Custom Events
  ☆21Updated 10 years ago
• socjordi / sauron
  Windows Monitoring Agent (process creation + DLL loading monitor + network monitor + file system access monitor + etc)
  ☆63Updated 6 years ago
• OSRDrivers / deleteex
  Demonstrate the new FileDispositionInfoEx behavior
  ☆14Updated 8 years ago
• JKornev / NTlib
  Static library and headers for linking your software with ntdll.dll
  ☆37Updated 6 years ago
• hostzhen / sysark
  Sysark全称system anti-rootkit，是我学习内核写的工具（2013年的代码，后续不会再更新），里面基本上所有的功能都是用内核实现的。这里只是实现了反rootkit部分功能，作为工具的话，本人觉得还欠完善，但作为学习，或有人需要。目前针对的是XP SP2，…
  ☆27Updated 8 years ago
• shines77 / Antinvader2015
  An minifilter-based transparent encryptor on Windows.
  ☆30Updated 8 years ago
• Fliggibish / RansomwareDetector
  ☆12Updated 8 years ago
• therealdreg / pdbdump_bochs
  Dump PDB Symbols including support for Bochs Debugging Format (with wine support)
  ☆14Updated 2 years ago
• fake-cheater / MouHidInputHook
  MouHidInputHook enables users to filter, modify, and inject mouse input data packets into the input data stream of HID USB mouse devices …
  ☆11Updated 6 years ago
• hellopw / fiddle
  基于WinDivert实现的一个包过滤与截断程序
  ☆13Updated 7 years ago
• eyalfishler / CrystalCPUID
  use crystalCPUID to identify vt-x & amd-v
  ☆17Updated 10 years ago
• Titvt / x128dbg
  A plugin for x64dbg.
  ☆24Updated 4 years ago
• packetzero / etwrealtime
  Example of real-time Windows ETW packet capture session
  ☆54Updated 8 years ago
• fengjixuchui / CodaPinTracer
  Lightweight WINAPI tracing with Pin
  ☆27Updated 6 years ago
• tsarpaul / WinRpcTutorial
  A working version of this tutorial: https://docs.microsoft.com/en-us/windows/desktop/rpc/tutorial
  ☆16Updated 6 years ago