ambray / Ntfs
Various libraries focused on examining/parsing NTFS-specific structures
☆16Updated 9 years ago
Related projects ⓘ
Alternatives and complementary repositories for Ntfs
- simple plugin for lastest olly versions to display the callstack☆15Updated 11 years ago
- wow64 syscall filter☆13Updated 10 years ago
- Ssdt Hook Detection tool☆12Updated 8 years ago
- The project is a demo solution for one of the anti-rootkit techniques aimed on overcoming splicers☆34Updated 7 years ago
- User-mode process cross-checking utility intended to detect naive malware hiding itself by hooking IAT/EAT.☆18Updated 8 years ago
- Framework complet d'analyse de malware☆12Updated 8 years ago
- Notes my learning steps about Windows-NT☆22Updated 7 years ago
- CVE-2014-0816☆24Updated 8 years ago
- ☆13Updated 7 years ago
- Windows registry files interactive viewer☆9Updated 7 years ago
- A project dedicated towards researching the Windows operating system's kernel mode enviornment.☆8Updated 8 years ago
- ☆11Updated 9 years ago
- Handy WMI query tool.☆12Updated 8 years ago
- RunPE dump - I wrote this to have better control over the analysis of malwares. I can stop and analysis malware when it uses some of the …☆10Updated 9 years ago
- Obtain remote process cookies by performing a brute-force attack on ntdll.RtlDecodePointer using known pointer encodings.☆21Updated 7 years ago
- Sandbox d'analyse de malware pour Windows 7 avec un client TCP en mode noyau☆19Updated 8 years ago
- ☆15Updated 6 years ago
- Inject codes to another process to watch and operate other process. This is usually used as anti-virus software.☆10Updated 9 years ago
- WinDbg scripting language utilities.☆11Updated 4 years ago
- ☆13Updated 7 years ago
- Native Development Kit for Vista 64bit And Later, by me, Based on NDK Headers 1.0, by Alex Ionescu☆16Updated 8 years ago
- Some of example code that I have collected while learning☆10Updated 8 years ago
- 파일시스템 미니필터 드라이버 (교육용 코드)☆6Updated 5 years ago
- find and kill injectedThreads from memory☆10Updated 8 years ago
- Legal access: The driver and console app to demonstrate the basic memory access in kernel mode☆9Updated 6 years ago