A C# process filter driver example which was implemented with the Process Filter Driver SDK. The Process Filter Driver SDK is a kernel-mode driver that filters process/thread creation and termination, it provides you an easy way to develop Windows application for the Windows process monitoring and protection.
☆14Sep 24, 2026Updated last month
Alternatives and similar repositories for ProcessFilterExample
Users that are interested in ProcessFilterExample are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- File security filter driver SDK, implemented with a Windows file system filter driver framework. It allows you to implement file audit, …☆19Sep 24, 2026Updated last month
- A mini filter driver development framework allows you to develop minit filter driver with different features.☆74Sep 24, 2026Updated last month
- A C# transparent file encryption example which was implemented with the Transparent Encryption File System Filter Driver SDK. The Transp…☆15Sep 24, 2026Updated last month
- EaseFilter File Security Filter Driver SDK. EaseFilter Comprehensive File Security SDK is a set of file system filter driver software dev…☆16Sep 24, 2026Updated last month
- With the folder locker you can prevent your protected files being read,written,deleted, renamed, copied out of the protected folder, allo…☆13Sep 24, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Read ETW Provider events. Inspired by ETWExplorer by Pavel Yosifovich☆21Jun 29, 2024Updated 2 years ago
- A tiny Windows console executable that can be distributed with an application and called from an installer to download and install the .N…☆28Dec 2, 2025Updated 11 months ago
- how to monitor the file activities on file system level, capture file open, create, overwrite, read, write, query file information, set f…☆23Sep 24, 2026Updated last month
- Helper functions for calculating the authenticode digest for a portable executable file☆21Apr 30, 2020Updated 6 years ago
- hook KeyboardClassServiceCallback to prevent messing up sistema☆27Nov 14, 2023Updated 2 years ago
- Application features: Sets visibility of its own executeable file to hidden --> Adds itself to the registry of run-on-startup application…☆10Jan 30, 2019Updated 7 years ago
- Attempts to suspend all known AV/EDRs processes on Windows using syscalls and the undocumented NtSuspendProcess API. Made with <3 for pen…☆12May 11, 2023Updated 3 years ago
- 基于MFC框架实现的Windows进程信息查看，窗口查看，软件卸载，开机启动项，进程保护与隐藏☆11Jun 17, 2021Updated 5 years ago
- Kernel module to hide tcp connections from an attacker ip address☆12Mar 24, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Minimal PoC developed as discuss in https://captmeelo.com/redteam/maldev/2022/05/10/ntcreateuserprocess.html☆143May 10, 2022Updated 4 years ago
- Looks for a vulnerable entry point to bypass BE Anti Cheat or other in Ring3☆18Feb 25, 2023Updated 3 years ago
- A Practical example of ELAM (Early Launch Anti-Malware)☆35Nov 12, 2021Updated 4 years ago
- Windows file system driver which allows to block access to files at run-time (C/C++, C#, WDK, SDK)☆12Jan 1, 2023Updated 3 years ago
- This is the AV ("protection solution") used for my windows 10 rootkit main project. this includes the installer stager program, a service…☆13May 2, 2024Updated 2 years ago
- C++ helper library for Windows bcrypt, ncrypt and credman☆20Nov 20, 2023Updated 2 years ago
- stack spoofing☆16Nov 15, 2024Updated last year
- The Windows kernel-mode driver for Portmaster integration☆35Aug 30, 2023Updated 3 years ago
- Another Portable Executable files analysing stuff☆21May 28, 2011Updated 15 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- 数据库应用系统——试卷智能生成与题库管理系统☆16Jun 1, 2017Updated 9 years ago
- PhysPatch performs physical memory scanning and patching of the entire Windows Kernel using DMA☆13Nov 10, 2024Updated last year
- An encapsulated Windows Firewall component that requires XE3 or later☆13Mar 21, 2014Updated 12 years ago
- 一个 HTTP隧道的 C&C ，可以用 CDN 隐藏， 免杀，流量加密，为了学习HTTP隧道而写，仅做学习交流☆14Jun 29, 2021Updated 5 years ago
- Malware - Machine Learning☆11Mar 24, 2018Updated 8 years ago
- Fast ssdeep comparison library☆13Nov 3, 2014Updated 11 years ago
- A PowerShell module for creating and removing Loopback Network Adapters on Windows using Device Conslole (DevCon.exe)☆15Feb 26, 2021Updated 5 years ago
- A starter fastapi application that is configured to be deployed to AWS vis the Docker ECS plugin☆10Sep 2, 2020Updated 6 years ago
- Here you can find some vulnerable Windows Kernel Drivers☆14Feb 21, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Export MISP attributes in Yara☆12Sep 15, 2017Updated 9 years ago
- Free and opensource antivirus based on ClamAV.☆16Oct 18, 2026Updated 2 weeks ago
- Suspend and resume processes by using functions in ntdll.dll.☆15Feb 23, 2014Updated 12 years ago
- Alpine:v3.4 + Selenium + Chrome☆13Nov 9, 2017Updated 8 years ago
- 适用于一些单位组织的那种在专门的APP上答题，但是又有题库的开卷考试，方便搜索答案，基于PaddleOCR开发😂😂😂☆19Sep 3, 2021Updated 5 years ago
- A cog implementation of mPLUG-Owl🦉, a multimodal large language model☆11May 12, 2023Updated 3 years ago
- This project is a collection of malware signatures for KicomAV.☆11Jan 23, 2026Updated 9 months ago