Alternatives and similar repositories for mini-filter-driver-framework

Users that are interested in mini-filter-driver-framework are comparing it to the libraries listed below

• hfiref0x / AuthHashCalc
  Authenticode Hash Calculator for PE32/PE32+ files
  ☆117Updated 4 months ago
• zodiacon / ObjectExplorer
  Explore Kernel Objects on Windows
  ☆238Updated 7 months ago
• DownWithUp / ALPC-Example
  An example of a client and server using Windows' ALPC functions to send and receive data.
  ☆107Updated 9 months ago
• je5442804 / CreateProcessInternalW-Full
  Reimplement CreateProcessInternalW via Windows 10 20H1+/Windows 11 Base on NtCreateUserProcess-Post
  ☆73Updated last year
• zodiacon / PoolMonXv3
  Monitor Kernel pool allocations tags
  ☆76Updated 2 years ago
• zodiacon / winnativeapibooksamples
  Samples from my book Windows Native API programming
  ☆79Updated 6 months ago
• diversenok / Suspending-Techniques
  Comparing, discussing, and bypassing various techniques for suspending and freezing processes on Windows.
  ☆128Updated 4 years ago
• utoni / PastDSE
  DSE bypass using a leaked cert and adjusting the current clock.
  ☆151Updated last month
• zodiacon / WinSys
  C++ library for low-level Windows development
  ☆80Updated last year
• zodiacon / sysrun
  Run any executable as SYSTEM account (no service required)
  ☆139Updated last year
• zodiacon / TotalPE
  Yet another PE Viewer
  ☆142Updated 2 years ago
• sgabe / SymlinkProtect
  File system minifilter driver for Windows to block symbolic link attacks.
  ☆52Updated 4 years ago
• zodiacon / TotalPE2
  PE Viewer
  ☆201Updated 2 months ago
• bb107 / RtlWow64
  c++ implementation of windows heavens gate
  ☆70Updated 4 years ago
• magnusstubman / dll-exports
  Collection of DLL function export forwards for DLL export function proxying
  ☆105Updated 2 months ago
• zodiacon / DbgPrint
  Debug Print viewer (user and kernel)
  ☆68Updated last year
• lowleveldesign / comon
  A WinDbg extension to trace COM interactions
  ☆122Updated 3 months ago
• 0mWindyBug / RansomGuard
  anti-ransomware file-system filter
  ☆67Updated last year
• zodiacon / PoolMonXv2
  Kernel Pool Monitor
  ☆127Updated 3 years ago
• zodiacon / TotalSystem
  View Windows System in action
  ☆39Updated 3 months ago
• pathtofile / PPLRunner
  Run Processes as PPL with ELAM
  ☆172Updated 3 years ago
• SweetIceLolly / Prevent_File_Deletion
  Record & prevent file deletion in kernel mode
  ☆44Updated 5 years ago
• A-Normal-User / NtSocket_NtClient_NtServer
  Using NtCreateFile and NtDeviceIoControlFile to realize the function of winsock（利用NtCreateFile和NtDeviceIoControlFile 实现winsock的功能）
  ☆112Updated 3 years ago
• zodiacon / VerifierDLL
  Example of building an application verifer DLL
  ☆49Updated last year
• csandker / InterProcessCommunication-Samples
  Some Code Samples for Windows based Inter-Process-Communication (IPC)
  ☆204Updated last year
• Fatmike-GH / PELoader
  A Windows PE loader / manual mapper for executables (x86 and x64) with full TLS (Thread Local Storage) support.
  ☆75Updated 2 weeks ago
• d35ha / xLogger
  Simple windows API logger
  ☆109Updated 6 years ago
• m417z / global-inject-demo
  A global injection and hooking example
  ☆162Updated 2 years ago
• 0mWindyBug / WFPCalloutReserach
  research revolving the windows filtering platform callout mechanism
  ☆35Updated last year
• m417z / LdrDllNotificationHook
  Hook all callbacks which are registered with LdrRegisterDllNotification
  ☆91Updated 7 months ago