A mini filter driver development framework allows you to develop minit filter driver with different features.
☆74Jun 20, 2026Updated 2 months ago
Alternatives and similar repositories for mini-filter-driver-framework
Users that are interested in mini-filter-driver-framework are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A Practical example of ELAM (Early Launch Anti-Malware)☆36Nov 12, 2021Updated 4 years ago
- File security filter driver SDK, implemented with a Windows file system filter driver framework. It allows you to implement file audit, …☆19Jun 20, 2026Updated 2 months ago
- A small NtCreateUserProcess PoC that spawns a Command prompt.☆105Apr 11, 2026Updated 4 months ago
- how to monitor the file activities on file system level, capture file open, create, overwrite, read, write, query file information, set f…☆23Jun 20, 2026Updated 2 months ago
- Uses Threat-Intelligence ETW events to identify shellcode regions being hidden by fluctuating memory protections☆186May 17, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A C# transparent file encryption example which was implemented with the Transparent Encryption File System Filter Driver SDK. The Transp…☆15Jun 20, 2026Updated 2 months ago
- WinDbg cheat sheet☆17May 10, 2023Updated 3 years ago
- EaseFilter File Security Filter Driver SDK. EaseFilter Comprehensive File Security SDK is a set of file system filter driver software dev…☆16Jun 20, 2026Updated 2 months ago
- This is the AV ("protection solution") used for my windows 10 rootkit main project. this includes the installer stager program, a service…☆13May 2, 2024Updated 2 years ago
- A library that can map one IP-Port to another IP-Port.☆30Jun 11, 2019Updated 7 years ago
- very simple masm64 example to demonstrate how to compile MASM 64 bit using NMake/CMake☆14Aug 23, 2022Updated 4 years ago
- With the folder locker you can prevent your protected files being read,written,deleted, renamed, copied out of the protected folder, allo…☆12Jun 20, 2026Updated 2 months ago
- Helper functions for calculating the authenticode digest for a portable executable file☆20Apr 30, 2020Updated 6 years ago
- PoC tools of Bytecode Jiu-Jitsu presented at Black Hat USA 2024 Briefings☆24Aug 31, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Record & prevent file deletion in kernel mode☆45Jul 22, 2020Updated 6 years ago
- An example driver for Windows that shows how to set-up some basic components of the Windows Filtering Platform☆207Jul 6, 2022Updated 4 years ago
- anti cheat drv open source☆19Apr 18, 2024Updated 2 years ago
- silence file system monitoring components by hooking their minifilters☆63Jan 31, 2024Updated 2 years ago
- A File System Filter Driver for file I/O monitors, file access control, transparent file encryption.☆42Jun 20, 2026Updated 2 months ago
- Yossi Mandil & Tomer Gill's Bachelor Degree Final Project under the BIU Cyber Center - Malware & Benign File Classification using Machin…☆10Jun 24, 2018Updated 8 years ago
- A MacOS VFS isolation layer to redirect file I/O operations.☆31Jan 27, 2018Updated 8 years ago
- An example code of CiGetCertPublisherName☆15Mar 24, 2022Updated 4 years ago
- debug isolated usermode process on Nested Virtualization guest vm☆34Oct 20, 2025Updated 10 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- DWM hooking-based screenshot tool☆38Sep 13, 2025Updated 11 months ago
- A simple POC to show how to chain multiple callbacks via tail calls to artificially construct a call stack☆111May 25, 2026Updated 3 months ago
- ☆27Dec 29, 2021Updated 4 years ago
- This repo contains EXPs about Vulnerable Windows Driver☆49May 22, 2024Updated 2 years ago
- ☆26Jul 19, 2026Updated last month
- stack spoofing☆15Nov 15, 2024Updated last year
- KrabsETW provides a modern C++ wrapper and a .NET wrapper around the low-level ETW trace consumption functions.☆801Aug 22, 2026Updated last week
- Playing with packets in C#☆15Aug 16, 2024Updated 2 years ago
- Read ETW Provider events. Inspired by ETWExplorer by Pavel Yosifovich☆21Jun 29, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆18Jun 30, 2017Updated 9 years ago
- A simple program to hook the current process to identify the manual syscall executions on windows☆266Nov 18, 2022Updated 3 years ago
- Elevate arbitrary MSR writes to kernel execution.☆54Sep 3, 2023Updated 2 years ago
- Windows 11 24H2-25H2 Runtime PatchGuard Bypass☆265Nov 4, 2025Updated 9 months ago
- [HIPS]RDP(3389)爆破防护☆45Feb 28, 2019Updated 7 years ago
- c# based port scanner with some common options to scan machines and ports. Couldf be good when stuck inside a windows internal network.☆10Apr 12, 2022Updated 4 years ago
- An example of how a driver can register a handle creation callback.☆16Jun 12, 2023Updated 3 years ago