Alternatives and similar repositories for NTFSDirectorySystem

Users that are interested in NTFSDirectorySystem are comparing it to the libraries listed below

• socjordi / sauron
  Windows Monitoring Agent (process creation + DLL loading monitor + network monitor + file system access monitor + etc)
  ☆63Updated 7 years ago
• egtra / ndiscap-packet
  Windows ndiscap.sys adapter for WinPcap applications
  ☆27Updated 9 years ago
• kaimi-io / event-tracing-for-windows
  Library for ETW, ProcessTracker sample based on ETW
  ☆34Updated 8 years ago
• japajoe / StackVMCPP
  A stack and register based virtual machine which can compile and execute arbitrary code in runtime
  ☆45Updated 10 months ago
• hkxiaoyu118 / KernelBase
  Windows 驱动开发基础函数库，供个人使用
  ☆15Updated 6 years ago
• aaaddress1 / wow64Jit
  Call 32bit NtDLL API directly from WoW64 Layer
  ☆61Updated 5 years ago
• Vicshann / Common
  Some eternal WIP stuff :)
  ☆20Updated 2 months ago
• xmoezzz / NativeLib-R
  ntos internals
  ☆23Updated 6 years ago
• AndrewGaspar / km-stl
  A drop-in replacement for the C++ STL for kernel mode Windows drivers. The goal is to have implementations for things like the standard a…
  ☆32Updated 9 years ago
• prash-wghats / Dtrace-ETW
  DTrace for Windows in userspace; Frontend to ETW
  ☆27Updated 3 years ago
• smartdj / pdbexp
  PDB Explorer 是一个能够查看微软 pdb 文件（Program DataBase，程序数据库）的工具，它能够将 pdb 文件中的 struct、union 及 enum 类型的定义以 C/C++ 的语法显示出来，特别适合 Windows 底层研究人员及 DDK …
  ☆38Updated 10 years ago
• Barakat / windows.sandbox
  Windows sandbox PoC
  ☆32Updated 5 years ago
• gigabitwize / dank
  Driver Loader/BE Bypass/Win Malware(lol)
  ☆36Updated 6 years ago
• 474172261 / DataProtector
  A simple ransomware defender.It uses minifilter to filt "rewrite" and "delete" events in kernel.And it handles event in user mode.
  ☆27Updated 7 years ago
• therealdreg / pdbdump_bochs
  Dump PDB Symbols including support for Bochs Debugging Format (with wine support)
  ☆14Updated 2 years ago
• Chuyu-Team / woflib
  An open source library for operating the Windows Overlay Filter driver.
  ☆22Updated 7 years ago
• bb107 / ServiceCall
  Interprocess communication library, providing the ability to call functions from each other
  ☆20Updated 6 years ago
• muxq / hellorpc
  windows rpc 使用MIDL+RPC实现HelloWorld
  ☆23Updated 7 years ago
• phonegapX / Dotfuscator_x86
  一个32位windows下x86指令集的代码扭曲加密小工具
  ☆33Updated 6 years ago
• gerronjo / openlibs
  Open Source Libraries Collection
  ☆24Updated 10 years ago
• cansou / msvcrt
  用于研究vs2008的crt源码，以编写windows下posix c 库
  ☆29Updated 7 years ago
• SHA-MRIZ / FsMinfilterHooking
  ☆33Updated 5 years ago
• noelmartinon / ExecAs
  Command line utility that executes a command (plaintext or encryted) as another user account or under specified user session
  ☆18Updated 6 years ago
• MoePus / wowHijack
  Run some secret code invisible from debugger single step.(x86 process on x64 windows only)
  ☆25Updated 5 years ago
• fengjixuchui / CodaPinTracer
  Lightweight WINAPI tracing with Pin
  ☆27Updated 6 years ago
• ZaneLogi / DevConWin
  A tool to investigate the Windows device manager
  ☆13Updated 6 years ago
• jnastarot / soul_eater
  it can extract functions from .dll, .exe, .sys and it be work! :)
  ☆39Updated 6 years ago
• KernelPanic-OpenSource / Win2K3_NT_sdktools
  Windows Server 2K3 NT 5
  ☆12Updated 4 years ago
• JKornev / NTlib
  Static library and headers for linking your software with ntdll.dll
  ☆38Updated 6 years ago
• xuyun018 / LPC-Local-Procedure-Call-
  LPC (Local Procedure Call) is a portion of Windows NT kernel, used for fast communication between threads or processes. It can be also us…
  ☆15Updated 4 years ago