A simple example application to collect DNS queries logs using etw-api
☆31May 11, 2020Updated 6 years ago
Alternatives and similar repositories for etw-dns
Users that are interested in etw-dns are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Procmonel is Procmon like monitoring system implemented using Microsoft WDK☆13Dec 25, 2019Updated 6 years ago
- A simple parser(library) which extracts shimcache data from windows.☆15May 20, 2019Updated 7 years ago
- WFP驱动，关联链路层和进程信息☆16Oct 17, 2021Updated 5 years ago
- An example of a camera class (upper) filter driver for Windows.☆46Aug 13, 2025Updated last year
- 粗暴地枚举管理内核的WFP对象。 Manage kernel WFPs in a brutal way.☆24Jan 14, 2018Updated 8 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- ☆16Sep 26, 2019Updated 7 years ago
- A ProcMon-esque tool for monitoring Windows Kernel Drivers☆67May 31, 2021Updated 5 years ago
- 冰云安全U盘☆20Oct 3, 2022Updated 4 years ago
- Disable any USB Mass Storage device from kmode using a pnp filter driver☆64Jan 24, 2021Updated 5 years ago
- Brand New Code Injection for Windows https://breakingmalware.com/injection-techniques/atombombing-brand-new-code-injection-for-windows☆18Oct 29, 2016Updated 10 years ago
- iSwordSDK （Provide Powerful Kernel API For Ring3 Applications）☆17Mar 25, 2022Updated 4 years ago
- windows net program☆13Oct 16, 2014Updated 12 years ago
- File system minifilter driver for Windows to block symbolic link attacks.☆53Dec 16, 2020Updated 5 years ago
- DTrace for Windows in userspace; Frontend to ETW☆26Oct 4, 2022Updated 4 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Popular driver source with guarded regions bypass☆14Nov 12, 2022Updated 3 years ago
- Events from all manifest-based and mof-based ETW providers across Windows 10 versions☆341Oct 12, 2026Updated 2 weeks ago
- 一个可以帮助你进行Windows驱动开发和分析的工具。☆46Jun 13, 2021Updated 5 years ago
- Windows Minifilter driver that redirects any I/O Request of mp3 files to a target file☆19Jul 7, 2015Updated 11 years ago
- ☆18Sep 27, 2016Updated 10 years ago
- Process Monitor X v2☆665Jul 4, 2026Updated 3 months ago
- 打印WFP的callouts☆10Aug 15, 2022Updated 4 years ago
- A Win32 logger based on DebugView & ETW.☆16Nov 15, 2017Updated 8 years ago
- 让Etwhook再次伟大! Make InfinityHook Great Again!☆148Jun 24, 2021Updated 5 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ☆17Jan 9, 2023Updated 3 years ago
- Windows system repair tool☆18Jun 2, 2021Updated 5 years ago
- Rovnix Bootkit☆121Feb 25, 2015Updated 11 years ago
- ☆178Sep 9, 2020Updated 6 years ago
- Monitor ETW events for Windows process mitigation policies, with stack traces☆30Oct 7, 2022Updated 4 years ago
- KrabsETW provides a modern C++ wrapper and a .NET wrapper around the low-level ETW trace consumption functions.☆811Oct 10, 2026Updated 2 weeks ago
- PoC memory injection detection agent based on ETW, for offensive and defensive research purposes☆300Apr 10, 2021Updated 5 years ago
- ☆69Mar 3, 2022Updated 4 years ago
- Simple project that demonstrates how an ETW consumer can be created just by using NTDLL☆154Feb 23, 2019Updated 7 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- 使用WFP重定向socket链接☆61May 17, 2020Updated 6 years ago
- ☆31Dec 1, 2022Updated 3 years ago
- Emulator for Windows Malware Analysis☆16Feb 26, 2022Updated 4 years ago
- windows驱动开发、linux编程等☆61Aug 26, 2021Updated 5 years ago
- PatchGuard Research☆304Oct 6, 2018Updated 8 years ago
- open source process monitor☆358Updated this week
- 基于 Intel VT-x 硬件虚拟化技术的原生 Windows 内核调试器☆39Oct 13, 2026Updated 2 weeks ago