Alternatives and similar repositories for mini-filter-driver-framework

Users that are interested in mini-filter-driver-framework are comparing it to the libraries listed below

• hfiref0x / AuthHashCalc
  Authenticode Hash Calculator for PE32/PE32+ files
  ☆120Updated 7 months ago
• zodiacon / ObjectExplorer
  Explore Kernel Objects on Windows
  ☆244Updated 9 months ago
• zodiacon / DbgPrint
  Debug Print viewer (user and kernel)
  ☆71Updated last year
• DownWithUp / ALPC-Example
  An example of a client and server using Windows' ALPC functions to send and receive data.
  ☆115Updated last year
• zodiacon / PoolMonXv3
  Monitor Kernel pool allocations tags
  ☆77Updated 2 years ago
• m417z / LdrDllNotificationHook
  Hook all callbacks which are registered with LdrRegisterDllNotification
  ☆96Updated 9 months ago
• sgabe / SymlinkProtect
  File system minifilter driver for Windows to block symbolic link attacks.
  ☆52Updated 5 years ago
• bb107 / RtlWow64
  c++ implementation of windows heavens gate
  ☆70Updated 4 years ago
• zodiacon / TotalPE
  Yet another PE Viewer
  ☆143Updated 3 years ago
• diversenok / Suspending-Techniques
  Comparing, discussing, and bypassing various techniques for suspending and freezing processes on Windows.
  ☆136Updated 4 years ago
• zodiacon / TotalSystem
  View Windows System in action
  ☆45Updated 5 months ago
• Cerbersec / HDE64
  Hacker Disassembler Engine 64 Copyright (c) 2008-2009, Vyacheslav Patkov. * All rights reserved.
  ☆55Updated 4 years ago
• m417z / global-inject-demo
  A global injection and hooking example
  ☆167Updated 2 years ago
• alal4465 / KernelMon
  A ProcMon-esque tool for monitoring Windows Kernel Drivers
  ☆61Updated 4 years ago
• zodiacon / TotalPE2
  PE Viewer
  ☆206Updated last week
• zodiacon / WinSys
  C++ library for low-level Windows development
  ☆81Updated last year
• utoni / PastDSE
  DSE bypass using a leaked cert and adjusting the current clock.
  ☆154Updated 3 months ago
• Rhydon1337 / windows-kernel-file-delete
  Force a file delete using a windows kernel driver
  ☆72Updated 3 years ago
• je5442804 / CreateProcessInternalW-Full
  Reimplement CreateProcessInternalW via Windows 10 20H1+/Windows 11 Base on NtCreateUserProcess-Post
  ☆77Updated last year
• A-Normal-User / NtSocket_NtClient_NtServer
  Using NtCreateFile and NtDeviceIoControlFile to realize the function of winsock（利用NtCreateFile和NtDeviceIoControlFile 实现winsock的功能）
  ☆127Updated 3 years ago
• pathtofile / PPLRunner
  Run Processes as PPL with ELAM
  ☆175Updated 3 years ago
• GoodstudyChina / APC-injection-x86-x64
  ☆74Updated 7 years ago
• Demonslay335 / DotNetMonitor
  Think APIMonitor, but for .NET binaries.
  ☆57Updated 2 years ago
• sonyps5201314 / wow64ext
  Another wow64ext to try to be compatible with WOW64 for all architectures.
  ☆98Updated last month
• microsoft / ndis-driver-library
  Code to make it easier to write an NDIS network driver on Windows
  ☆92Updated 2 years ago
• 0mWindyBug / MinifilterHook
  silence file system monitoring components by hooking their minifilters
  ☆59Updated 2 years ago
• zodiacon / winnativeapibooksamples
  Samples from my book Windows Native API programming
  ☆80Updated 8 months ago
• zodiacon / RemoteThreadDetection
  Remote Thread Detection with a Kernel Driver
  ☆34Updated last year
• Fatmike-GH / PELoader
  A Windows PE loader / manual mapper for executables (x86 and x64) with full TLS (Thread Local Storage) support.
  ☆84Updated 3 months ago
• ajkhoury / ApiSet
  API Set resolver for Windows
  ☆141Updated last year