ambray / Ntfs
Various libraries focused on examining/parsing NTFS-specific structures
☆16Updated 9 years ago
Alternatives and similar repositories for Ntfs:
Users that are interested in Ntfs are comparing it to the libraries listed below
- wow64 syscall filter☆13Updated 10 years ago
- Framework complet d'analyse de malware☆12Updated 9 years ago
- RunPE dump - I wrote this to have better control over the analysis of malwares. I can stop and analysis malware when it uses some of the …☆10Updated 9 years ago
- Ssdt Hook Detection tool☆13Updated 8 years ago
- Windows registry files interactive viewer☆9Updated 7 years ago
- Handy WMI query tool.☆12Updated 8 years ago
- Notes my learning steps about Windows-NT☆23Updated 7 years ago
- simple plugin for lastest olly versions to display the callstack☆16Updated 11 years ago
- The project is a demo solution for one of the anti-rootkit techniques aimed on overcoming splicers☆34Updated 8 years ago
- Lists work items being queued currently.☆13Updated 9 years ago
- Continuation of the popular patchdiff IDA plugin☆10Updated 10 years ago
- ☆10Updated 10 years ago
- Sandbox d'analyse de malware pour Windows 7 avec un client TCP en mode noyau☆19Updated 9 years ago
- ☆12Updated 10 years ago
- Native Development Kit for Vista 64bit And Later, by me, Based on NDK Headers 1.0, by Alex Ionescu☆16Updated 9 years ago
- The Windows driver and device management program for NDAS devices such as the NetDISK.☆16Updated 8 years ago
- Obtain remote process cookies by performing a brute-force attack on ntdll.RtlDecodePointer using known pointer encodings.☆22Updated 7 years ago
- ☆9Updated 8 years ago
- Windows device tree walker☆15Updated 6 years ago
- A tool evaluates security configurations of a given PE based on SDL without source code☆14Updated 10 years ago
- Remote execution tool☆14Updated 11 years ago
- an efficient yet easy to use network packet builder and parser☆11Updated 7 years ago
- Malware monitor template based on MinHook☆16Updated 10 years ago
- Debug Bootkit Tool Source☆9Updated 7 years ago
- Windows Kernel Mode PCRE☆10Updated 10 years ago
- ☆15Updated 7 years ago
- User-mode process cross-checking utility intended to detect naive malware hiding itself by hooking IAT/EAT.☆19Updated 9 years ago
- Pafish4vs is based on [Pafish]( https://github.com/a0rtega/pafish) , just ported to the VS (VC) compiler (X64 , X86) .☆13Updated 8 years ago
- Final Transparent encrypted version☆14Updated 8 years ago
- Decompile an x86 exe, and read PE infos.☆19Updated 6 years ago