Ransomware detection application for Windows using Windows Minifilter driver
☆94Jun 6, 2020Updated 6 years ago
Alternatives and similar repositories for RansomWatch
Users that are interested in RansomWatch are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Technion CS Ransomware Project: Writing Windows Mini-Filter Driver to protect PC from Ransomware☆38Feb 11, 2021Updated 5 years ago
- Easy Transparent Encrypted File System Based on Minifilter File System Driver☆36Feb 23, 2026Updated 5 months ago
- PsSetCreateProcessNotifyRoutine/Ex/Ex2 hook☆13May 30, 2024Updated 2 years ago
- ☆33Dec 22, 2020Updated 5 years ago
- Procmonel is Procmon like monitoring system implemented using Microsoft WDK☆13Dec 25, 2019Updated 6 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A minifilter driver for detecting and blocking ransomware virus☆28Mar 4, 2018Updated 8 years ago
- File system minifilter driver for Windows to block symbolic link attacks.☆53Dec 16, 2020Updated 5 years ago
- It's a minifilter used for transparent-encrypting.☆343Jul 28, 2025Updated 11 months ago
- silence file system monitoring components by hooking their minifilters☆63Jan 31, 2024Updated 2 years ago
- A Deep Learning ensemble that classifies Windows executable files as either benign, ransomware, or other malware.☆27Jul 4, 2019Updated 7 years ago
- Record & prevent file deletion in kernel mode☆45Jul 22, 2020Updated 6 years ago
- A minifilter driver preserves all modified and deleted files.☆81Jul 17, 2015Updated 11 years ago
- a dkom rootkit that targets windows x64 systems. the rootkit hooks and edits criticl memory sections in order to hide different resources…☆19Jul 5, 2023Updated 3 years ago
- Hot reload DLL on windows☆11Oct 7, 2018Updated 7 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Ready-to-use headers for Windows Kernel SSDT indices☆10Apr 12, 2020Updated 6 years ago
- A Linux/Windows Ransomware PoC written in Python, Go and C☆16Jun 17, 2023Updated 3 years ago
- ☆30Nov 8, 2017Updated 8 years ago
- A Practical example of ELAM (Early Launch Anti-Malware)☆36Nov 12, 2021Updated 4 years ago
- 基于MiniFilter和Sfilter的加解密☆24Jun 4, 2019Updated 7 years ago
- ☆27Jan 4, 2024Updated 2 years ago
- Compiles a json dataset using public sources that contains properties to aid in the detection and mitigation of over 1000 variants of ran…☆73May 22, 2023Updated 3 years ago
- This project has been moved from a private repository.☆11May 4, 2018Updated 8 years ago
- Machine Learning Ransomware Detection☆37Apr 8, 2018Updated 8 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- NTFS minifilter driver that can download file content from a remote location, when it is opened for the first time.☆112Oct 11, 2022Updated 3 years ago
- 参考《Windows内核安全与驱动开发》的透明加密解密Minifilter☆74May 29, 2022Updated 4 years ago
- Windows安全防火墙☆14Aug 25, 2020Updated 5 years ago
- Helper functions for calculating the authenticode digest for a portable executable file☆20Apr 30, 2020Updated 6 years ago
- research revolving the windows filtering platform callout mechanism☆42May 26, 2024Updated 2 years ago
- Suspend and resume processes by using functions in ntdll.dll.☆15Feb 23, 2014Updated 12 years ago
- a loadable windows disk filter driver☆16Nov 24, 2012Updated 13 years ago
- Infects PE files with a shellcode☆22Oct 20, 2018Updated 7 years ago
- Windows file system minifilter driver which generates backup copies of certain files before they change☆49Oct 13, 2018Updated 7 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Use ci.dll API for validating Authenticode signature of files☆169Mar 28, 2022Updated 4 years ago
- An example of a camera class (upper) filter driver for Windows.☆45Aug 13, 2025Updated 11 months ago
- Static Library For Windows Drivers☆42Jun 19, 2026Updated last month
- a windows kernel keylogger that works☆20Feb 12, 2024Updated 2 years ago
- Ransomware Detection using Machine Learning Models and Ensemble Technique☆38Aug 8, 2024Updated last year
- RemDisk is a software capable of creating and mounting RAM-based or file-based, plain or encrypted, virtual disks☆46Aug 20, 2019Updated 6 years ago
- Demo to show how write ALPC Client & Server using native Ntdll.dll syscalls.☆21Jan 25, 2022Updated 4 years ago