EaseFilterSDK / mini-filter-driver-frameworkLinks
A mini filter driver development framework allows you to develop minit filter driver with different features.
☆65Updated last month
Alternatives and similar repositories for mini-filter-driver-framework
Users that are interested in mini-filter-driver-framework are comparing it to the libraries listed below
Sorting:
- Authenticode Hash Calculator for PE32/PE32+ files☆119Updated 5 months ago
- Monitor Kernel pool allocations tags☆76Updated 2 years ago
- Explore Kernel Objects on Windows☆239Updated 8 months ago
- An example of a client and server using Windows' ALPC functions to send and receive data.☆107Updated 10 months ago
- c++ implementation of windows heavens gate☆70Updated 4 years ago
- A Windows PE loader / manual mapper for executables (x86 and x64) with full TLS (Thread Local Storage) support.☆76Updated last month
- Debug Print viewer (user and kernel)☆69Updated last year
- View Windows System in action☆39Updated 4 months ago
- Samples from my book Windows Native API programming☆80Updated 6 months ago
- DSE bypass using a leaked cert and adjusting the current clock.☆151Updated 2 months ago
- Using NtCreateFile and NtDeviceIoControlFile to realize the function of winsock（利用NtCreateFile和NtDeviceIoControlFile 实现winsock的功能）☆113Updated 3 years ago
- Yet another PE Viewer☆142Updated 2 years ago
- Reimplement CreateProcessInternalW via Windows 10 20H1+/Windows 11 Base on NtCreateUserProcess-Post☆73Updated last year
- Run Processes as PPL with ELAM☆173Updated 3 years ago
- PE Viewer☆202Updated 3 months ago
- Helper functions for calculating the authenticode digest for a portable executable file☆21Updated 5 years ago
- C++ library for low-level Windows development☆81Updated last year
- Hook all callbacks which are registered with LdrRegisterDllNotification☆94Updated 8 months ago
- Comparing, discussing, and bypassing various techniques for suspending and freezing processes on Windows.☆128Updated 4 years ago
- File system minifilter driver for Windows to block symbolic link attacks.☆52Updated 4 years ago
- A x64 PE Packer/Protector Developed in C++ and VisualStudio☆54Updated 2 years ago
- a ntdll.h head file which download from network, and fix all found problems by me.☆33Updated 11 months ago
- A ProcMon-esque tool for monitoring Windows Kernel Drivers☆60Updated 4 years ago
- research revolving the windows filtering platform callout mechanism☆35Updated last year
- Think APIMonitor, but for .NET binaries.☆56Updated 2 years ago
- Remote Thread Detection with a Kernel Driver☆33Updated 10 months ago
- Use ntdll/ntoskrnl to implement Kernel32, Advapi32 and other APIs. It includes user-mode and kernel-mode.☆90Updated 3 months ago
- Force a file delete using a windows kernel driver☆71Updated 3 years ago
- A global injection and hooking example☆164Updated 2 years ago
- Some Code Samples for Windows based Inter-Process-Communication (IPC)☆203Updated last year