Alternatives and similar repositories for NTFSDirectorySystem:

Users that are interested in NTFSDirectorySystem are comparing it to the libraries listed below

• japajoe / StackVMCPP
  A stack and register based virtual machine which can compile and execute arbitrary code in runtime
  ☆42Updated 2 years ago
• hkxiaoyu118 / KernelBase
  Windows 驱动开发基础函数库，供个人使用
  ☆14Updated 5 years ago
• smartdj / pdbexp
  PDB Explorer 是一个能够查看微软 pdb 文件（Program DataBase，程序数据库）的工具，它能够将 pdb 文件中的 struct、union 及 enum 类型的定义以 C/C++ 的语法显示出来，特别适合 Windows 底层研究人员及 DDK …
  ☆37Updated 9 years ago
• kouzhudong / libdrv
  Static Library For Windows Drivers
  ☆33Updated last month
• bb107 / ServiceCall
  Interprocess communication library, providing the ability to call functions from each other
  ☆20Updated 5 years ago
• batteryshark / afdproxy
  A SOCKS5-configured syscall hook that allows transparent TCP proxying on Windows for IPv4 and IPv6.
  ☆22Updated 3 years ago
• prash-wghats / Dtrace-ETW
  DTrace for Windows in userspace; Frontend to ETW
  ☆27Updated 2 years ago
• kkent030315 / Process-Dumper
  Memory Dumper For Win10 x64 Processes
  ☆15Updated 4 years ago
• BrunoMCBraga / Kernel-Whisperer
  ☆28Updated 4 years ago
• lieff / dynobj
  Dynamic COFF object loader
  ☆22Updated 6 years ago
• jnastarot / cleancall
  Library for using direct system calls
  ☆35Updated 2 weeks ago
• SweetIceLolly / Prevent_File_Deletion
  Record & prevent file deletion in kernel mode
  ☆41Updated 4 years ago
• muxq / hellorpc
  windows rpc 使用MIDL+RPC实现HelloWorld
  ☆22Updated 6 years ago
• christianshub / process-injection-guard
  Signature scanner and API hooks to detect malicious process injection
  ☆24Updated last year
• bb107 / RtlWow64
  c++ implementation of windows heavens gate
  ☆68Updated 4 years ago
• zodiacon / WinSys
  C++ library for low-level Windows development
  ☆72Updated 10 months ago
• x-super-rat / x-rat
  ☆10Updated 5 years ago
• hMihaiDavid / addscn
  Add an empty section to a PE file
  ☆52Updated 7 years ago
• xuyun018 / LPC-Local-Procedure-Call-
  LPC (Local Procedure Call) is a portion of Windows NT kernel, used for fast communication between threads or processes. It can be also us…
  ☆15Updated 3 years ago
• zodiacon / DbgPrint
  Debug Print viewer (user and kernel)
  ☆65Updated last year
• VeroFess / X64SystemCall
  All Nt Syscall and W32k Syscall in one asm, include, and call it!
  ☆57Updated 3 years ago
• Vicshann / Common
  Some eternal WIP stuff :)
  ☆15Updated this week
• socjordi / sauron
  Windows Monitoring Agent (process creation + DLL loading monitor + network monitor + file system access monitor + etc)
  ☆61Updated 6 years ago
• binbibi / CallbackEx
  Demo List cm/ps/ob/minifilter callback And Patch/Bypass it
  ☆28Updated 7 years ago
• gerronjo / openlibs
  Open Source Libraries Collection
  ☆24Updated 9 years ago
• wes4m / unHooker
  Kernel (Ring0) - SSDT unhook driver
  ☆14Updated 6 years ago
• xmoezzz / NativeLib-R
  ntos internals
  ☆22Updated 5 years ago
• viorelyo / Procmonel
  Procmonel is Procmon like monitoring system implemented using Microsoft WDK
  ☆11Updated 5 years ago
• MiroKaku / ConMon
  Windows Console Monitor
  ☆33Updated 5 years ago
• SHA-MRIZ / FsMinfilterHooking
  ☆30Updated 4 years ago