Alternatives and similar repositories for RansomWatch:

Users that are interested in RansomWatch are comparing it to the libraries listed below

• tandasat / Scavenger
  A minifilter driver preserves all modified and deleted files.
  ☆80Updated 9 years ago
• Ido-Moshe-Github / CiDllDemo
  Use ci.dll API for validating Authenticode signature of files
  ☆137Updated 2 years ago
• leeqwind / PESignAnalyzer
  This program can retrieve signature information from PE files which signed by one or more certificates on Windows. Supporting multi-signe…
  ☆99Updated 2 years ago
• alal4465 / KernelMon
  A ProcMon-esque tool for monitoring Windows Kernel Drivers
  ☆54Updated 3 years ago
• GoodstudyChina / APC-injection-x86-x64
  ☆65Updated 6 years ago
• DragonQuestHero / Win32KernelSTL
  Using C++ STL on Windows kernle development
  ☆88Updated 5 years ago
• pwnslinger / USBlocker
  Disable any USB Mass Storage device from kmode using a pnp filter driver
  ☆60Updated 4 years ago
• konstantin89 / windows-pe-signature-verifying
  Modern C++ wrapper for Windows PE signature verification mechanism
  ☆28Updated 5 years ago
• DownWithUp / ALPC-Example
  An example of a client and server using Windows' ALPC functions to send and receive data.
  ☆90Updated last week
• kernweak / minicrypt
  基于MiniFilter和Sfilter的加解密
  ☆21Updated 5 years ago
• Rhydon1337 / windows-kernel-file-protector
  Protect a file from being deleted using windows kernel file system minifilter driver
  ☆35Updated 3 years ago
• ETEFS / ETEFS_Mini
  Easy Transparent Encrypted File System Based on Minifilter File System Driver
  ☆34Updated 3 weeks ago
• SHA-MRIZ / FsMinfilterHooking
  ☆30Updated 4 years ago
• sgabe / SymlinkProtect
  File system minifilter driver for Windows to block symbolic link attacks.
  ☆50Updated 4 years ago
• guidoreina / minivers
  Windows file system minifilter driver which generates backup copies of certain files before they change
  ☆46Updated 6 years ago
• SweetIceLolly / Prevent_File_Deletion
  Record & prevent file deletion in kernel mode
  ☆41Updated 4 years ago
• nihilboy / anti
  Automated Integration of anti-Reversing methods in PE executables
  ☆49Updated 6 years ago
• sidaxx / dxx
  Windows Kernel Driver with C++ runtime
  ☆169Updated 4 years ago
• Rhydon1337 / windows-kernel-file-delete
  Force a file delete using a windows kernel driver
  ☆62Updated 2 years ago
• gmh5225 / ntoskrnl_file_collection
  Collect various versions of ntoskrnl files
  ☆49Updated last year
• MeeSong / KTL
  Windows Kernel Template Library
  ☆108Updated 2 years ago
• Randomize163 / FSDefender
  Technion CS Ransomware Project: Writing Windows Mini-Filter Driver to protect PC from Ransomware
  ☆35Updated 3 years ago
• MiroKaku / libwsk
  The Kernel-Mode Winsock library, supporting TCP, UDP and Unix sockets (DGRAM and STREAM).
  ☆241Updated this week
• wbenny / EtwConsumerNT
  Simple project that demonstrates how an ETW consumer can be created just by using NTDLL
  ☆139Updated 5 years ago
• dennisbabkin / InjectAll
  Tutorial & a blog post that demonstrate how to code a Windows driver to inject a custom DLL into all running processes. I coded it from s…
  ☆129Updated 3 years ago
• AzureGreen / ArkProtect
  An Ark tool project，run on Win7 x86/x64
  ☆111Updated 7 years ago
• wbenny / avmext
  Anti-Anti-VM solution via Windows Driver
  ☆57Updated 6 years ago
• iHackerJi / MiniWfp
  基于WFP的小型网络过滤驱动，拦截百度的DNS，感谢公司前辈们的思路与指导。
  ☆14Updated 3 years ago
• TimelifeCzy / WFPDriver
  WFP驱动，关联链路层和进程信息
  ☆15Updated 3 years ago
• d35ha / xLogger
  Simple windows API logger
  ☆98Updated 5 years ago