EaseFilterSDK / mini-filter-driver-frameworkLinks
A mini filter driver development framework allows you to develop minit filter driver with different features.
☆60Updated 4 months ago
Alternatives and similar repositories for mini-filter-driver-framework
Users that are interested in mini-filter-driver-framework are comparing it to the libraries listed below
Sorting:
- Yet another PE Viewer☆143Updated 2 years ago
- Explore Kernel Objects on Windows☆225Updated 5 months ago
- Samples from my book Windows Native API programming☆74Updated 4 months ago
- Authenticode Hash Calculator for PE32/PE32+ files☆114Updated 2 months ago
- View Windows System in action☆42Updated last month
- C++ library for low-level Windows development☆79Updated last year
- PE Viewer☆194Updated 2 weeks ago
- Remote Thread Detection with a Kernel Driver☆33Updated 7 months ago
- An example of a client and server using Windows' ALPC functions to send and receive data.☆101Updated 7 months ago
- Monitor Kernel pool allocations tags☆69Updated last year
- Collection of DLL function export forwards for DLL export function proxying☆104Updated 3 weeks ago
- ☆24Updated 2 months ago
- File system minifilter driver for Windows to block symbolic link attacks.☆52Updated 4 years ago
- DSE bypass using a leaked cert and adjusting the current clock.☆152Updated 2 years ago
- Debug Print viewer (user and kernel)☆68Updated last year
- Using NtCreateFile and NtDeviceIoControlFile to realize the function of winsock（利用NtCreateFile和NtDeviceIoControlFile 实现winsock的功能）☆112Updated 3 years ago
- Comparing, discussing, and bypassing various techniques for suspending and freezing processes on Windows.☆127Updated 3 years ago
- A Windows executable (PE) loader (x86 and x64) with full TLS (Thread Local Storage) support (manual mapper)☆64Updated 3 months ago
- A x64 PE Packer/Protector Developed in C++ and VisualStudio☆54Updated 2 years ago
- Bootkit for Windows Sandbox to disable DSE/PatchGuard.☆305Updated 11 months ago
- A global injection and hooking example☆149Updated last year
- Sample for Creating a new kernel object type and supporting API☆27Updated last year
- Some Code Samples for Windows based Inter-Process-Communication (IPC)☆198Updated last year
- API Set Viewer☆92Updated 7 months ago
- Run Processes as PPL with ELAM☆168Updated 3 years ago
- c++ implementation of windows heavens gate☆72Updated 4 years ago
- Run any executable as SYSTEM account (no service required)☆137Updated last year
- Simple example for getting started with eBPF for Windows☆48Updated 6 months ago
- API Set resolver for Windows☆135Updated last year
- Kernel Security driver used to block past, current and future process injection techniques on Windows Operating System.☆154Updated 3 years ago