Alternatives and similar repositories for mini-filter-driver-framework

Users that are interested in mini-filter-driver-framework are comparing it to the libraries listed below

• hfiref0x / AuthHashCalc
  Authenticode Hash Calculator for PE32/PE32+ files
  ☆114Updated 3 months ago
• zodiacon / TotalPE
  Yet another PE Viewer
  ☆141Updated 2 years ago
• zodiacon / WinSys
  C++ library for low-level Windows development
  ☆80Updated last year
• zodiacon / PoolMonXv3
  Monitor Kernel pool allocations tags
  ☆75Updated last year
• DownWithUp / ALPC-Example
  An example of a client and server using Windows' ALPC functions to send and receive data.
  ☆107Updated 9 months ago
• zodiacon / ObjectExplorer
  Explore Kernel Objects on Windows
  ☆228Updated 6 months ago
• je5442804 / CreateProcessInternalW-Full
  Reimplement CreateProcessInternalW via Windows 10 20H1+/Windows 11 Base on NtCreateUserProcess-Post
  ☆73Updated last year
• bb107 / RtlWow64
  c++ implementation of windows heavens gate
  ☆70Updated 4 years ago
• zodiacon / winnativeapibooksamples
  Samples from my book Windows Native API programming
  ☆77Updated 5 months ago
• mihaly044 / pedigest
  Helper functions for calculating the authenticode digest for a portable executable file
  ☆21Updated 5 years ago
• magnusstubman / dll-exports
  Collection of DLL function export forwards for DLL export function proxying
  ☆105Updated 2 months ago
• zodiacon / TotalSystem
  View Windows System in action
  ☆39Updated 2 months ago
• zodiacon / sysrun
  Run any executable as SYSTEM account (no service required)
  ☆139Updated last year
• utoni / PastDSE
  DSE bypass using a leaked cert and adjusting the current clock.
  ☆151Updated 3 weeks ago
• 0mWindyBug / WFPCalloutReserach
  research revolving the windows filtering platform callout mechanism
  ☆35Updated last year
• Fatmike-GH / PELoader
  A Windows executable (PE) loader (x86 and x64) with full TLS (Thread Local Storage) support (manual mapper)
  ☆74Updated this week
• sgabe / SymlinkProtect
  File system minifilter driver for Windows to block symbolic link attacks.
  ☆52Updated 4 years ago
• m417z / global-inject-demo
  A global injection and hooking example
  ☆159Updated 2 years ago
• m417z / LdrDllNotificationHook
  Hook all callbacks which are registered with LdrRegisterDllNotification
  ☆90Updated 6 months ago
• sonyps5201314 / ntdll
  a ntdll.h head file which download from network, and fix all found problems by me.
  ☆33Updated 9 months ago
• zodiacon / DbgPrint
  Debug Print viewer (user and kernel)
  ☆67Updated last year
• Biswa96 / TraceEvent
  Trace events in real time sessions
  ☆44Updated 2 years ago
• zodiacon / TotalPE2
  PE Viewer
  ☆198Updated last month
• 0mWindyBug / MinifilterHook
  silence file system monitoring components by hooking their minifilters
  ☆59Updated last year
• Rhydon1337 / windows-kernel-process-protector
  Protect a process from code injection, termination and hooking
  ☆49Updated 4 years ago
• zodiacon / PoolMonXv2
  Kernel Pool Monitor
  ☆127Updated 3 years ago
• A-Normal-User / NtSocket_NtClient_NtServer
  Using NtCreateFile and NtDeviceIoControlFile to realize the function of winsock（利用NtCreateFile和NtDeviceIoControlFile 实现winsock的功能）
  ☆113Updated 3 years ago
• 0mWindyBug / RansomGuard
  anti-ransomware file-system filter
  ☆62Updated last year
• Rhydon1337 / windows-kernel-file-delete
  Force a file delete using a windows kernel driver
  ☆71Updated 3 years ago
• Fyyre / ntdll
  ntdll.h - compatible with MSVC 6.0, Intel C++ Compiler and MinGW. Serves as a complete replacement for Windows.h
  ☆146Updated 6 years ago