EaseFilterSDK / mini-filter-driver-frameworkLinks
A mini filter driver development framework allows you to develop minit filter driver with different features.
☆55Updated 3 months ago
Alternatives and similar repositories for mini-filter-driver-framework
Users that are interested in mini-filter-driver-framework are comparing it to the libraries listed below
Sorting:
- Monitor Kernel pool allocations tags☆66Updated last year
- C++ library for low-level Windows development☆80Updated last year
- View Windows System in action☆41Updated 2 months ago
- Authenticode Hash Calculator for PE32/PE32+ files☆113Updated last month
- Samples from my book Windows Native API programming☆73Updated 2 months ago
- Collection of DLL function export forwards for DLL export function proxying☆102Updated last year
- Debug Print viewer (user and kernel)☆68Updated last year
- Record & prevent file deletion in kernel mode☆44Updated 5 years ago
- ☆24Updated 3 weeks ago
- File system minifilter driver for Windows to block symbolic link attacks.☆51Updated 4 years ago
- c++ implementation of windows heavens gate☆72Updated 4 years ago
- Explore Kernel Objects on Windows☆223Updated 3 months ago
- DSE bypass using a leaked cert and adjusting the current clock.☆150Updated 2 years ago
- A x64 PE Packer/Protector Developed in C++ and VisualStudio☆52Updated last year
- Hook all callbacks which are registered with LdrRegisterDllNotification☆88Updated 4 months ago
- Reimplement CreateProcessInternalW via Windows 10 20H1+/Windows 11 Base on NtCreateUserProcess-Post☆64Updated 11 months ago
- Yet another PE Viewer☆143Updated 2 years ago
- Protect a process from code injection, termination and hooking☆49Updated 4 years ago
- Example of building an application verifer DLL☆50Updated last year
- Comparing, discussing, and bypassing various techniques for suspending and freezing processes on Windows.☆127Updated 3 years ago
- An example of a client and server using Windows' ALPC functions to send and receive data.☆100Updated 6 months ago
- Force a file delete using a windows kernel driver☆67Updated 3 years ago
- Trace events in real time sessions☆45Updated last year
- Remote Thread Detection with a Kernel Driver☆33Updated 6 months ago
- Helper functions for calculating the authenticode digest for a portable executable file☆21Updated 5 years ago
- Run any executable as SYSTEM account (no service required)☆134Updated last year
- PE Viewer☆188Updated 6 months ago
- silence file system monitoring components by hooking their minifilters☆58Updated last year
- Sample for Creating a new kernel object type and supporting API☆27Updated 10 months ago
- A Windows executable (PE) loader (x86 and x64) with full TLS (Thread Local Storage) support (manual mapper)☆58Updated last month