GDATASoftwareAG / smartvmi
Virtual Machine Introspection (VMI) for memory forensics and machine-learning.
☆26Updated 2 weeks ago
Related projects ⓘ
Alternatives and complementary repositories for smartvmi
- IntroVirt is an guest introspection library for KVM☆53Updated 2 months ago
- Windbg2ida lets you dump each step in Windbg then shows these steps in IDA☆73Updated 4 months ago
- Robust API monitoring system presented in the paper "Designing Robust API Monitoring Solutions" (IEEE TDSC)☆23Updated 2 years ago
- KVM Virtual Machine Introspection Library☆45Updated 11 months ago
- ☆19Updated 2 weeks ago
- VMI-Unpack - A Virtual Machine Introspection (VMI) based generic unpacker.☆54Updated 4 years ago
- Resources for the workshop titled "Repacking the unpacker: Applying Time Travel Debugging to malware analysis", given at HackLu 2019☆39Updated 5 years ago
- VMCS Auditor provides almost all of Intel's VMCS Layout checklist based on Bochs Emulator.☆31Updated 5 years ago
- Driver and WinDBG scripts to dump information about all resources and lookaside lists☆66Updated 4 years ago
- Hyper-V scripts☆112Updated last year
- [ARCHIVED] mov rax, ${Thalium/IceBox}; jmp rax;☆71Updated 5 years ago
- Tools made for my Hyper-V blog series @ https://foxhex0ne.blogspot.com/☆54Updated 4 years ago
- clone of armadillo patched for windows☆46Updated 3 weeks ago
- A collection of tools, source code, and papers researching Windows' implementation of CET.☆74Updated 4 years ago
- Elevation of privilege detector based on HyperPlatform☆117Updated 7 years ago
- Parser for Microsoft Program Database (PDB) files☆74Updated 4 years ago
- a binary x86win32 code obfuscator using virtual machine☆32Updated 7 years ago
- ☆43Updated 2 months ago
- Build your emulation environment as needed☆64Updated 3 years ago
- ☆120Updated last month
- VMX intrinsics plugin for Hex-Rays decompiler☆70Updated 5 years ago
- Hyper-V Research is trendy now☆172Updated 6 months ago
- AMD SVM hypervisor rootkit proof of concept☆42Updated last year
- IDA Plugin which decodes Windows Device I/O control code into DeviceType, FunctionCode, AccessType and MethodType.☆105Updated 11 months ago
- Hyper-V related resources☆31Updated 8 months ago
- Python bindings for the Microsoft Hypervisor Platform APIs.☆66Updated 5 years ago
- A research project about Windows notify routines.☆35Updated 4 years ago
- A simple hypervisor demonstrating the use of the Intel VT-rp (redirect protection) technology.☆91Updated 7 months ago
- An experimental dynamic malware unpacker based on Intel Pin and PE-sieve☆57Updated 3 months ago
- A Binary Ninja plugin that uses bruteforced XFG hashes to recover precise function prototypes☆13Updated 9 months ago