ambray / Ntfs
Various libraries focused on examining/parsing NTFS-specific structures
☆16Updated 9 years ago
Alternatives and similar repositories for Ntfs:
Users that are interested in Ntfs are comparing it to the libraries listed below
- Framework complet d'analyse de malware☆12Updated 9 years ago
- The project is a demo solution for one of the anti-rootkit techniques aimed on overcoming splicers☆34Updated 8 years ago
- wow64 syscall filter☆13Updated 10 years ago
- Lists work items being queued currently.☆14Updated 9 years ago
- User-mode process cross-checking utility intended to detect naive malware hiding itself by hooking IAT/EAT.☆19Updated 9 years ago
- CVE-2014-0816☆25Updated 8 years ago
- Native Development Kit for Vista 64bit And Later, by me, Based on NDK Headers 1.0, by Alex Ionescu☆16Updated 9 years ago
- An idea in hooking APIs by replacing calls that lead to them☆1Updated 2 years ago
- A tool evaluates security configurations of a given PE based on SDL without source code☆14Updated 10 years ago
- A project dedicated towards researching the Windows operating system's kernel mode enviornment.☆8Updated 9 years ago
- The Windows driver and device management program for NDAS devices such as the NetDISK.☆16Updated 8 years ago
- RunPE dump - I wrote this to have better control over the analysis of malwares. I can stop and analysis malware when it uses some of the …☆10Updated 9 years ago
- ☆13Updated 7 years ago
- Handy WMI query tool.☆12Updated 8 years ago
- Sandbox d'analyse de malware pour Windows 7 avec un client TCP en mode noyau☆19Updated 9 years ago
- Windows registry files interactive viewer☆9Updated 8 years ago
- Ssdt Hook Detection tool☆13Updated 8 years ago
- Scanning and identifying XOR encrypted PE files in PE resources☆27Updated 10 years ago
- Notes my learning steps about Windows-NT☆23Updated 7 years ago
- Remote execution tool☆14Updated 11 years ago
- does reflective dll injection☆8Updated 11 years ago
- ☆13Updated 8 years ago
- Maltrace is a simple syscall tracer for Windows implemented through the use of PIN.☆23Updated 12 years ago
- Inject codes to another process to watch and operate other process. This is usually used as anti-virus software.☆12Updated 9 years ago
- ☆9Updated 8 years ago
- simple plugin for lastest olly versions to display the callstack☆16Updated 12 years ago
- an efficient yet easy to use network packet builder and parser☆11Updated 7 years ago
- Kernel-mode file scanner☆18Updated 6 years ago
- Final Transparent encrypted version☆14Updated 8 years ago
- Class implementation of PowerLoader injection technique☆29Updated 8 years ago