MalwareTech / AppContainerSandbox
An example sandbox using AppContainer (Windows 8+)
☆135Updated 5 years ago
Alternatives and similar repositories for AppContainerSandbox:
Users that are interested in AppContainerSandbox are comparing it to the libraries listed below
- Simpleator ("Simple-ator") is an innovative Windows-centric x64 user-mode application emulator that leverages several new features that w…☆361Updated 6 years ago
- Monitor activity of any driver☆335Updated 4 years ago
- The history of Windows Internals via symbols.☆177Updated 3 years ago
- Source code for File Test - Interactive File System Test Tool☆279Updated last week
- PICO processes toolbox, playground for PICO processes research☆72Updated 7 years ago
- Proof of concept implementation of in-memory PE Loader based on ReflectiveDLLInjection Technique☆152Updated 6 years ago
- A library for intercepting native functions by hooking KiFastSystemCall☆72Updated 4 years ago
- IntelVT-X nice feature -> tool☆94Updated 10 years ago
- Library that allows you to run 64bit code on a Wow64 32bit process☆145Updated 7 years ago
- windows syscall table from xp ~ 10 rs4☆352Updated 6 years ago
- Loading unsigned code into kernel in Windows 10 (64) with help of VMware Workstation Pro/Player design flaw☆135Updated 7 years ago
- PE file manipulation library.☆63Updated 5 years ago
- Libraries for extending WinDbg and its underlying components.☆110Updated 3 weeks ago
- Open source implementations of Microsoft compression algorithms☆208Updated 4 years ago
- Run executables in an AppContainer☆120Updated 6 years ago
- ☆125Updated 5 months ago
- ☆184Updated 9 years ago
- Hypervisor based tool for monitoring system register accesses.☆143Updated 6 years ago
- The ultimate hooking library☆263Updated 4 years ago
- Simple project that demonstrates how an ETW consumer can be created just by using NTDLL☆139Updated 6 years ago
- Deviare In Process Instrumentation Engine☆337Updated 5 years ago
- PatchGuard Research☆295Updated 6 years ago
- Persistent IAT hooking application - based on bearparser☆252Updated 2 years ago
- nyā☆71Updated 9 years ago
- A tool to help when dealing with Windows IOCTL codes or reversing Windows drivers.☆430Updated 6 years ago
- Simple tool to bundle windows DLLs with PE executable☆113Updated 10 years ago
- PE file manipulation library☆76Updated 4 years ago
- Local Kernel Debugger (LKD) is a python wrapper around dbgengine.dll☆92Updated 8 years ago
- Windbg extension to find PatchGuard pages☆118Updated 10 years ago
- ☆158Updated 5 months ago