Alternatives and similar repositories for mini-filter-driver-framework

Users that are interested in mini-filter-driver-framework are comparing it to the libraries listed below

• DownWithUp / ALPC-Example
  An example of a client and server using Windows' ALPC functions to send and receive data.
  ☆109Updated 11 months ago
• zodiacon / PoolMonXv3
  Monitor Kernel pool allocations tags
  ☆76Updated 2 years ago
• sgabe / SymlinkProtect
  File system minifilter driver for Windows to block symbolic link attacks.
  ☆52Updated 5 years ago
• zodiacon / TotalPE2
  PE Viewer
  ☆202Updated 3 months ago
• alal4465 / KernelMon
  A ProcMon-esque tool for monitoring Windows Kernel Drivers
  ☆60Updated 4 years ago
• hfiref0x / AuthHashCalc
  Authenticode Hash Calculator for PE32/PE32+ files
  ☆119Updated 5 months ago
• diversenok / Suspending-Techniques
  Comparing, discussing, and bypassing various techniques for suspending and freezing processes on Windows.
  ☆130Updated 4 years ago
• zodiacon / TotalSystem
  View Windows System in action
  ☆40Updated 4 months ago
• zodiacon / TotalPE
  Yet another PE Viewer
  ☆142Updated 2 years ago
• je5442804 / CreateProcessInternalW-Full
  Reimplement CreateProcessInternalW via Windows 10 20H1+/Windows 11 Base on NtCreateUserProcess-Post
  ☆75Updated last year
• zodiacon / ObjectExplorer
  Explore Kernel Objects on Windows
  ☆239Updated 8 months ago
• zodiacon / DbgPrint
  Debug Print viewer (user and kernel)
  ☆69Updated last year
• 0mWindyBug / WFPCalloutReserach
  research revolving the windows filtering platform callout mechanism
  ☆35Updated last year
• A-Normal-User / NtSocket_NtClient_NtServer
  Using NtCreateFile and NtDeviceIoControlFile to realize the function of winsock（利用NtCreateFile和NtDeviceIoControlFile 实现winsock的功能）
  ☆114Updated 3 years ago
• zodiacon / WinSys
  C++ library for low-level Windows development
  ☆81Updated last year
• zodiacon / winnativeapibooksamples
  Samples from my book Windows Native API programming
  ☆80Updated 7 months ago
• bb107 / RtlWow64
  c++ implementation of windows heavens gate
  ☆70Updated 4 years ago
• MiroKaku / Musa.Core
  Use ntdll/ntoskrnl to implement Kernel32, Advapi32 and other APIs. It includes user-mode and kernel-mode.
  ☆93Updated 3 months ago
• pathtofile / PPLRunner
  Run Processes as PPL with ELAM
  ☆173Updated 3 years ago
• mihaly044 / pedigest
  Helper functions for calculating the authenticode digest for a portable executable file
  ☆21Updated 5 years ago
• m417z / LdrDllNotificationHook
  Hook all callbacks which are registered with LdrRegisterDllNotification
  ☆95Updated 8 months ago
• d35ha / xLogger
  Simple windows API logger
  ☆109Updated 6 years ago
• sonyps5201314 / ntdll
  a ntdll.h head file which download from network, and fix all found problems by me.
  ☆33Updated 11 months ago
• zodiacon / sysrun
  Run any executable as SYSTEM account (no service required)
  ☆138Updated last year
• Fatmike-GH / PELoader
  A Windows PE loader / manual mapper for executables (x86 and x64) with full TLS (Thread Local Storage) support.
  ☆82Updated last month
• m417z / global-inject-demo
  A global injection and hooking example
  ☆166Updated 2 years ago
• Artem-Malyi / windbg-cheat-sheet
  WinDbg cheat sheet
  ☆15Updated 2 years ago
• ajkhoury / ApiSet
  API Set resolver for Windows
  ☆141Updated last year
• SweetIceLolly / Prevent_File_Deletion
  Record & prevent file deletion in kernel mode
  ☆46Updated 5 years ago
• Cerbersec / HDE64
  Hacker Disassembler Engine 64 Copyright (c) 2008-2009, Vyacheslav Patkov. * All rights reserved.
  ☆52Updated 4 years ago