Alternatives and similar repositories for FOKS-TROT

Users that are interested in FOKS-TROT are comparing it to the libraries listed below

• HARM4Y / Minifilter

  View on GitHub
  参考《Windows内核安全与驱动开发》的透明加密解密Minifilter
  ☆75May 29, 2022Updated 3 years ago
• xiao70 / X70FSD

  View on GitHub
  Windows file system filter drivers(minifilter) to encrypt, compress, or otherwise modify file-based data require some of the most complex…
  ☆129Dec 27, 2020Updated 5 years ago
• ETEFS / ETEFS_Mini

  View on GitHub
  Easy Transparent Encrypted File System Based on Minifilter File System Driver
  ☆35Sep 30, 2025Updated 4 months ago
• BeneficialCode / WinArk

  View on GitHub
  Windows Anti-Rootkit Tool
  ☆542Dec 31, 2025Updated last month
• huoji120 / Etw-Syscall

  View on GitHub
  https://key08.com/index.php/2021/10/19/1375.html
  ☆71May 11, 2022Updated 3 years ago
• FiYHer / InfinityHookPro

  View on GitHub
  InfinityHookPro Win7 -> Win11 latest
  ☆551Feb 7, 2023Updated 3 years ago
• kouzhudong / libdrv

  View on GitHub
  Static Library For Windows Drivers
  ☆41Dec 13, 2025Updated 2 months ago
• MiroKaku / libwsk

  View on GitHub
  The Kernel-Mode Winsock library, supporting TCP, UDP and Unix sockets (DGRAM and STREAM).
  ☆275Jan 27, 2025Updated last year
• TimelifeCzy / HIPS-HIDS_CveMod

  View on GitHub
  Windows CVE主防(HIPS/HIDS)
  ☆56Apr 29, 2021Updated 4 years ago
• MiroKaku / DetoursX

  View on GitHub
  Kernel-Mode extended version of https://github.com/microsoft/Detours
  ☆180Jun 1, 2025Updated 8 months ago
• zhuhuibeishadiao / PatchGuardResearch

  View on GitHub
  win10 pgContext dynamic dump (btc version)
  ☆110Jan 15, 2020Updated 6 years ago
• Oxygen1a1 / kcrypt

  View on GitHub
  an encryption library designed for Windows kernel and driver programming
  ☆123Aug 4, 2023Updated 2 years ago
• HARM4Y / Karlann

  View on GitHub
  It's a kernel-based keylogger for Windows x86/x64.
  ☆145Sep 18, 2022Updated 3 years ago
• fIappy / infhook19041

  View on GitHub
  ☆127May 23, 2020Updated 5 years ago
• zzhouhe / PG1903

  View on GitHub
  ☆116Oct 1, 2019Updated 6 years ago
• bb107 / RtlWow64

  View on GitHub
  c++ implementation of windows heavens gate
  ☆70Feb 12, 2021Updated 5 years ago
• armasm / EasyAntiPatchGuard

  View on GitHub
  Easy Anti PatchGuard
  ☆223Apr 9, 2021Updated 4 years ago
• KelvinMsft / UsbMon

  View on GitHub
  ☆39Oct 29, 2020Updated 5 years ago
• yjugl / mitimon

  View on GitHub
  Monitor ETW events for Windows process mitigation policies, with stack traces
  ☆31Oct 7, 2022Updated 3 years ago
• zouxianyu / KernelHiddenExecute

  View on GitHub
  Hide codes/data in the kernel address space.
  ☆188May 8, 2021Updated 4 years ago
• BeneficialCode / WmipCodeSamples

  View on GitHub
  What makes it page
  ☆17Aug 24, 2022Updated 3 years ago
• iammaguire / Salient-Rootkit

  View on GitHub
  A kernel mode Windows rootkit in development.
  ☆49Dec 31, 2021Updated 4 years ago
• KelvinMsft / DeviceMon

  View on GitHub
  VT-based PCI device monitor (SPI)
  ☆158Oct 29, 2020Updated 5 years ago
• killvxk / DisableWin10PatchguardPoc

  View on GitHub
  pseudo-code to show how to disable patchguard with win10
  ☆294Jan 13, 2018Updated 8 years ago
• DragonQuestHero / Medusa

  View on GitHub
  Radical Windows ARK
  ☆251Apr 18, 2025Updated 9 months ago
• theSecHunter / Hades-Windows

  View on GitHub
  Hades HIDS/HIPS for Windows
  ☆307Oct 10, 2025Updated 4 months ago
• FaEryICE / MemScanner

  View on GitHub
  Analyze Windows x64 Kernel Memory Layout
  ☆129Nov 19, 2020Updated 5 years ago
• gmh5225 / CallMeWin32kDriver

  View on GitHub
  Load your driver like win32k.sys
  ☆258Aug 20, 2022Updated 3 years ago
• KANKOSHEV / Detect-HiddenThread-via-KPRCB

  View on GitHub
  Detect removed thread from PspCidTable.
  ☆75Mar 18, 2022Updated 3 years ago
• lainswork / dwm-screen-shot

  View on GitHub
  将shellcode注入dwm.exe以进行屏幕截取
  ☆355Mar 22, 2022Updated 3 years ago
• huoji120 / MakeInfinityHookGreatAgain

  View on GitHub
  让Etwhook再次伟大! Make InfinityHook Great Again!
  ☆147Jun 24, 2021Updated 4 years ago
• wbenny / EtwConsumerNT

  View on GitHub
  Simple project that demonstrates how an ETW consumer can be created just by using NTDLL
  ☆146Feb 23, 2019Updated 6 years ago
• basketwill / Sysmon_reverse

  View on GitHub
  ☆174Sep 9, 2020Updated 5 years ago
• IcEy-999 / Drv_Hide_And_Camouflage

  View on GitHub
  ☆307May 11, 2023Updated 2 years ago
• AzureGreen / ArkProtect

  View on GitHub
  An Ark tool project，run on Win7 x86/x64
  ☆118Jul 11, 2017Updated 8 years ago
• sidyhe / dxx

  View on GitHub
  Windows Kernel Driver with C++ runtime
  ☆181Sep 26, 2020Updated 5 years ago
• RafWu / RansomWatch

  View on GitHub
  Ransomware detection application for Windows using Windows Minifilter driver
  ☆93Jun 6, 2020Updated 5 years ago
• SDXT / MMInject

  View on GitHub
  Kernel DLL Injector using NX Bit Swapping and VAD hide for hiding injected DLL
  ☆220Nov 12, 2020Updated 5 years ago
• shines77 / Antinvader2015

  View on GitHub
  An minifilter-based transparent encryptor on Windows.
  ☆30Feb 27, 2017Updated 8 years ago