EaseFilter / FilterDriver
A File System Filter Driver for file I/O monitors, file access control, transparent file encryption.
☆36Updated last month
Alternatives and similar repositories for FilterDriver:
Users that are interested in FilterDriver are comparing it to the libraries listed below
- Windows Monitoring Agent (process creation + DLL loading monitor + network monitor + file system access monitor + etc)☆61Updated 5 years ago
- Easy Transparent Encrypted File System Based on Minifilter File System Driver☆34Updated last week
- ☆27Updated 4 years ago
- Trace events in real time sessions☆44Updated last year
- ☆18Updated 7 years ago
- Windows 驱动开发基础函数库,供个人使用☆14Updated 5 years ago
- a loadable windows disk filter driver☆15Updated 12 years ago
- DTrace for Windows in userspace; Frontend to ETW☆27Updated 2 years ago
- PE(compressed dll) memory loader using nt api☆44Updated 7 years ago
- WFP驱动,关联链路层和进程信息☆15Updated 3 years ago
- 基于MiniFilter和Sfilter的加解密☆21Updated 5 years ago
- kernel-mode TDI client which can send and receive HTTP requests☆55Updated 6 years ago
- MSTSC Packet Dump Utility☆28Updated 2 years ago
- 自己实现LoadLibrary函数的操作☆13Updated 7 years ago
- Windows file system minifilter driver which generates backup copies of certain files before they change☆46Updated 6 years ago
- Win32 API and COM hooking/tracing.☆31Updated 8 years ago
- An open source library for operating the Windows Overlay Filter driver.☆22Updated 6 years ago
- it can extract functions from .dll, .exe, .sys and it be work! :)☆38Updated 5 years ago
- A simple ransomware defender.It uses minifilter to filt "rewrite" and "delete" events in kernel.And it handles event in user mode.☆27Updated 6 years ago
- HTTP/HTTPS/DNS inspector (windows driver)☆25Updated 5 years ago
- Bypass HackShield several specific SSDT hook in Ring0☆22Updated 9 years ago
- Simple command line version of Sysinternals WinObj. Currently just lists object names and types given an object manager directory.☆19Updated last year
- Open Source Libraries Collection☆24Updated 9 years ago
- ☆30Updated 4 years ago
- A stack and register based virtual machine which can compile and execute arbitrary code in runtime☆41Updated 2 years ago
- Monitor and protect processes use "PsSetCreateProcessNotifyRoutineEx" and kernel ssdt hook.☆12Updated 5 years ago
- Windows tool box library☆64Updated 7 years ago
- ☆32Updated 4 years ago
- Locked home page for Internet Explorer.☆21Updated 10 years ago