DougRogers / NTFSDirectorySystemLinks
Fast NTFS Directory Scan and Search
☆16Updated 5 years ago
Alternatives and similar repositories for NTFSDirectorySystem
Users that are interested in NTFSDirectorySystem are comparing it to the libraries listed below
Sorting:
- DTrace for Windows in userspace; Frontend to ETW☆27Updated 3 years ago
- A stack and register based virtual machine which can compile and execute arbitrary code in runtime☆45Updated 9 months ago
- Windows Monitoring Agent (process creation + DLL loading monitor + network monitor + file system access monitor + etc)☆63Updated 6 years ago
- LPC (Local Procedure Call) is a portion of Windows NT kernel, used for fast communication between threads or processes. It can be also us…☆15Updated 4 years ago
- Windows ndiscap.sys adapter for WinPcap applications☆27Updated 9 years ago
- Dynamic COFF object loader☆23Updated 7 years ago
- A simple ransomware defender.It uses minifilter to filt "rewrite" and "delete" events in kernel.And it handles event in user mode.☆27Updated 7 years ago
- C++ library for low-level Windows development☆81Updated last year
- Lightweight Portable Executable parsing library and a demo peParser application.☆80Updated 2 years ago
- Windows 驱动开发基础函数库，供个人使用☆15Updated 6 years ago
- Structured Bindings Pack - serialize C++ structs into MessagePack binary form☆21Updated 5 years ago
- Simple command line version of Sysinternals WinObj. Currently just lists object names and types given an object manager directory.☆21Updated 2 years ago
- Import library generator for x86 PE files☆59Updated 6 years ago
- Library for ETW, ProcessTracker sample based on ETW☆34Updated 8 years ago
- This is a POC for loading shared object directly from memory without accessing the actual Linux file system.☆22Updated 4 years ago
- PDB Explorer 是一个能够查看微软 pdb 文件（Program DataBase，程序数据库）的工具，它能够将 pdb 文件中的 struct、union 及 enum 类型的定义以 C/C++ 的语法显示出来，特别适合 Windows 底层研究人员及 DDK …☆38Updated 10 years ago
- Static library and headers for linking your software with ntdll.dll☆37Updated 6 years ago
- fork HoShiMin Avanguard☆20Updated 7 years ago
- Interprocess communication library, providing the ability to call functions from each other☆20Updated 6 years ago
- PE Bliss - Cross-Platform Portable Executable C++ Library☆61Updated last year
- Windows sandbox PoC☆32Updated 5 years ago
- A driver to intercept low level windows events☆63Updated 6 years ago
- A collection of Windows Components(Mostly is ntoskrnl.exe)☆30Updated 5 years ago
- Dump PDB Symbols including support for Bochs Debugging Format (with wine support)☆14Updated 2 years ago
- Plugin for Process Hacker 2 ( https://github.com/processhacker2 ), displays system hooks and able to unhook too.☆52Updated 7 years ago
- Windows Server 2K3 NT 5☆12Updated 4 years ago
- A drop-in replacement for the C++ STL for kernel mode Windows drivers. The goal is to have implementations for things like the standard a…☆32Updated 9 years ago
- a C/C++ shellcode compiler based on llvm/clang☆39Updated 9 years ago
- Call 32bit NtDLL API directly from WoW64 Layer☆61Updated 5 years ago
- windows rpc 使用MIDL+RPC实现HelloWorld☆23Updated 7 years ago