The goal of the tool is to monitor requests received by selected device objects or kernel drivers. The tool is quite similar to IrpTracker but has several enhancements. It supports 64-bit versions of Windows (no inline hooks are used, only moodifications to driver object structures are performed) and monitors IRP, FastIo, AddDevice, DriverUnload…
☆419Dec 27, 2024Updated last year
Alternatives and similar repositories for IRPMon
Users that are interested in IRPMon are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- VrtuleTree is a tool that displays information about driver and device objects present in the system and relations between them. Its func…☆63Feb 28, 2021Updated 5 years ago
- WinDBG Anti-RootKit Extension☆641Jul 29, 2020Updated 6 years ago
- A tool to help when dealing with Windows IOCTL codes or reversing Windows drivers.☆440Aug 22, 2018Updated 8 years ago
- Windows Object Explorer 64-bit☆1,994Updated this week
- Monitor activity of any driver☆355Nov 2, 2020Updated 6 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- This driver implements the Intel Processor Trace functionality in Intel Skylake architecture for Microsoft Windows☆486Apr 17, 2018Updated 8 years ago
- KSOCKET provides a very basic example how to make a network connections in the Windows Driver by using WSK☆555Sep 2, 2022Updated 4 years ago
- Incident Response & Digital Forensics Debugging Extension☆400Dec 11, 2018Updated 7 years ago
- VirtualKD-Redux - A revival and modernization of VirtualKD☆986Jun 23, 2024Updated 2 years ago
- Hypervisor based tool for monitoring system register accesses.☆155Sep 13, 2018Updated 8 years ago
- A tool to help malware analysts tell that the sample is injecting code into other process.☆79Aug 12, 2015Updated 11 years ago
- Monitoring and controlling kernel API calls with stealth hook using EPT☆1,417Jan 22, 2022Updated 4 years ago
- Windows Console Monitor☆35Jun 11, 2019Updated 7 years ago
- Examples of leaking Kernel Mode information from User Mode on Windows☆646Jul 7, 2017Updated 9 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- pdbex is a utility for reconstructing structures and unions from the PDB into compilable C headers☆913Jun 18, 2025Updated last year
- kHypervisor is a lightweight bluepill-like nested VMM for Windows, it provides and emulating a basic function of Intel VT-x☆464Nov 29, 2021Updated 4 years ago
- MemoryRanger protects kernel data and code by running drivers and hosting data in isolated kernel enclaves using VT-x and EPT features. M…☆249Aug 31, 2026Updated 2 months ago
- Universal PatchGuard and Driver Signature Enforcement Disable☆891Updated this week
- Syscall Monitor is a system monitor program (like Sysinternal's Process Monitor) using Intel VT-X/EPT for Windows7+☆750Jun 26, 2017Updated 9 years ago
- PatchGuard Research☆305Oct 6, 2018Updated 8 years ago
- ☆239Oct 9, 2021Updated 5 years ago
- Turn off PatchGuard in real time for win7 (7600) ~ later☆1,049Apr 21, 2022Updated 4 years ago
- Debugger extension for the Debugging Tools for Windows (WinDbg, KD, CDB, NTSD).☆69Nov 14, 2016Updated 9 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A software driver that lets you log kernel-mode debug output into a file on Windows.☆106Jul 24, 2018Updated 8 years ago
- Detecting execution of kernel memory where is not backed by any image file☆263Jul 11, 2018Updated 8 years ago
- ☆35Oct 29, 2020Updated 6 years ago
- Helper library for x86 programs that runs under WOW64 layer on x64 versions of Microsoft Windows operating systems.☆1,020Jan 17, 2023Updated 3 years ago
- proof-of-concept Windows Driver for injecting DLL into user-mode processes using APC☆1,299May 1, 2024Updated 2 years ago
- Simple project that demonstrates how an ETW consumer can be created just by using NTDLL☆156Feb 23, 2019Updated 7 years ago
- Windows WDM driver filters to filter IO to devices and file systems☆56Apr 3, 2017Updated 9 years ago
- The Windows Library for Intel Process Trace (WinIPT) is a project that leverages the new Intel Processor Trace functionality exposed by W…☆413Apr 27, 2023Updated 3 years ago
- Windows kernel hacking framework, driver template, hypervisor and API written on C++☆1,824Nov 12, 2023Updated 2 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Research on Windows Kernel Executive Callback Objects☆317Feb 22, 2020Updated 6 years ago
- AllMemPro☆46Jan 15, 2018Updated 8 years ago
- Automatically exported from code.google.com/p/ioctlfuzzer☆173Jun 6, 2015Updated 11 years ago
- Minimalistic VT-x hypervisor with hooks☆951Oct 18, 2019Updated 7 years ago
- A WDM Windows driver to issue IO to storage devices with asynchronous multithreaded processing☆21Aug 28, 2016Updated 10 years ago
- RemDisk is a software capable of creating and mounting RAM-based or file-based, plain or encrypted, virtual disks☆46Aug 20, 2019Updated 7 years ago
- An Ark tool project，run on Win7 x86/x64☆116Jul 11, 2017Updated 9 years ago