A simple example application to collect DNS queries logs using etw-api
☆29May 11, 2020Updated 6 years ago
Alternatives and similar repositories for etw-dns
Users that are interested in etw-dns are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 冰云安全U盘☆19Oct 3, 2022Updated 3 years ago
- ☆16Sep 26, 2019Updated 6 years ago
- Brand New Code Injection for Windows https://breakingmalware.com/injection-techniques/atombombing-brand-new-code-injection-for-windows☆18Oct 29, 2016Updated 9 years ago
- An example of a camera class (upper) filter driver for Windows.☆45Aug 13, 2025Updated 10 months ago
- A simple parser(library) which extracts shimcache data from windows.☆16May 20, 2019Updated 7 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- windows net program☆13Oct 16, 2014Updated 11 years ago
- DTrace for Windows in userspace; Frontend to ETW☆26Oct 4, 2022Updated 3 years ago
- Popular driver source with guarded regions bypass☆14Nov 12, 2022Updated 3 years ago
- 粗暴地枚举管理内核的WFP对象。 Manage kernel WFPs in a brutal way.☆24Jan 14, 2018Updated 8 years ago
- Disable any USB Mass Storage device from kmode using a pnp filter driver☆64Jan 24, 2021Updated 5 years ago
- iSwordSDK （Provide Powerful Kernel API For Ring3 Applications）☆16Mar 25, 2022Updated 4 years ago
- ☆18Sep 27, 2016Updated 9 years ago
- Windows system repair tool☆18Jun 2, 2021Updated 5 years ago
- Emulator for Windows Malware Analysis☆15Feb 26, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Rovnix Bootkit☆122Feb 25, 2015Updated 11 years ago
- Linux下的设备管理器（支持硬件信息检测、设备驱动安装和硬件性能测试）☆10Oct 22, 2013Updated 12 years ago
- WFP驱动，关联链路层和进程信息☆16Oct 17, 2021Updated 4 years ago
- An minifilter-based transparent encryptor☆43May 21, 2014Updated 12 years ago
- Process Monitor X v2☆656Updated this week
- Events from all manifest-based and mof-based ETW providers across Windows 10 versions☆334May 2, 2024Updated 2 years ago
- BITS Transfers Manager☆46May 18, 2025Updated last year
- Visual Studio Extension and tools to ease development using Event Tracing for Windows (ETW).☆14Oct 6, 2020Updated 5 years ago
- ☆175Sep 9, 2020Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Walks the CFG bitmap to find previously executable but currently hidden shellcode regions☆141May 17, 2023Updated 3 years ago
- Event Tracing for Windows Custom Events☆21Jan 28, 2015Updated 11 years ago
- 让Etwhook再次伟大! Make InfinityHook Great Again!☆147Jun 24, 2021Updated 5 years ago
- Simple project that demonstrates how an ETW consumer can be created just by using NTDLL☆148Feb 23, 2019Updated 7 years ago
- ☆48Nov 7, 2018Updated 7 years ago
- A collection of tools, source code, and papers researching Windows' implementation of CET.☆93Oct 6, 2020Updated 5 years ago
- File system minifilter driver for Windows to block symbolic link attacks.☆53Dec 16, 2020Updated 5 years ago
- The project hooks windows printer functions using the Deviare Interception Engine☆18Jun 6, 2012Updated 14 years ago
- MAPS cloud scanner and response parser for Microsoft Defender research.☆93Feb 19, 2026Updated 4 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆35Jun 17, 2022Updated 4 years ago
- 使用WFP重定向socket链接☆62May 17, 2020Updated 6 years ago
- View ETW Provider manifest☆612Nov 1, 2024Updated last year
- PE Injection with ring3 hook bypass☆10May 3, 2021Updated 5 years ago
- Various WinDbg extensions and scripts☆34Sep 13, 2018Updated 7 years ago
- PatchGuard Research☆304Oct 6, 2018Updated 7 years ago
- PoC memory injection detection agent based on ETW, for offensive and defensive research purposes☆298Apr 10, 2021Updated 5 years ago