Alternatives and similar repositories for Sysmon_reverse

Users that are interested in Sysmon_reverse are comparing it to the libraries listed below

• stonedreamforest / re_sysdiag
  逆向火绒安全软件驱动——sysdiag
  ☆156Updated 7 years ago
• dybb8999 / Windows-kernel-security-and-driver-development-CD
  Windows内核安全与驱动开发书附赠的光盘源码
  ☆92Updated 7 years ago
• devilogic / cerberus
  win32下的虚拟机保护壳
  ☆140Updated 10 years ago
• wanttobeno / Win64DriverStudy_Src
  WIN64驱动编程基础教程-源码 作者：胡文亮
  ☆87Updated 7 years ago
• alphaSeclab / anti-debug
  ☆117Updated 7 years ago
• stonedreamforest / re_avkmgr
  逆向小红伞杀毒软件驱动——avkmgr
  ☆70Updated 7 years ago
• leeqwind / PESignAnalyzer
  This program can retrieve signature information from PE files which signed by one or more certificates on Windows. Supporting multi-signe…
  ☆101Updated 2 years ago
• chinatiny / WindowsPlatform
  ☆94Updated 3 years ago
• minglinchen / WinKernelDev
  ☆134Updated 5 years ago
• ChengChengCC / Ark-tools
  Windows Ark 工具的工程和一些demo
  ☆191Updated 9 years ago
• Microwave89 / rtsectiontest
  An Attempt to Bypass Memory Scanners By Misusing the ntdll.dll "RT" Section.
  ☆95Updated 9 years ago
• HARM4Y / Minifilter
  参考《Windows内核安全与驱动开发》的透明加密解密Minifilter
  ☆74Updated 3 years ago
• AzureGreen / ArkProtect
  An Ark tool project，run on Win7 x86/x64
  ☆114Updated 8 years ago
• FaEryICE / MemScanner
  Analyze Windows x64 Kernel Memory Layout
  ☆122Updated 4 years ago
• zzhouhe / PG1903
  ☆113Updated 5 years ago
• tombkeeper / Shellcode_Template_in_C
  ☆146Updated 4 years ago
• huoji120 / Heuristic_antivirus_engine_by_huoji
  基于UC的启发式杀毒引擎[还没做完]
  ☆34Updated 4 years ago
• BOT-Man-JL / WFP-Traffic-Redirection-Driver
  WFP Traffic Redirection Driver is used to redirect NIC traffic on network layer and framing layer, based on Windows Filtering Platform (W…
  ☆112Updated 7 years ago
• daterlove / ActiveDefense
  小型主动防御引擎
  ☆57Updated 9 years ago
• reinhardvz / wsk
  Automatically exported from code.google.com/p/wskudp
  ☆43Updated 9 years ago
• zhuhuibeishadiao / MiniVTx64
  Intel Virtualization Technology demo
  ☆68Updated 8 years ago
• BlackINT3 / none
  UNONE and KNONE is a couple of open source base library that makes it easy to develop software on Windows.
  ☆157Updated 2 years ago
• Iamgublin / NDIS6.30-NetMonitor
  NDIS6.30 Filter Library
  ☆45Updated 6 years ago
• zodiacon / ALPCLogger
  Log ALPC activity
  ☆84Updated last year
• xiaofen9 / SSDTHOOK
  An SSDT hook for Windows
  ☆60Updated 7 years ago
• tandasat / Scavenger
  A minifilter driver preserves all modified and deleted files.
  ☆80Updated 10 years ago
• hackflame / ida_python_extractCode
  ida提取特征码脚本
  ☆56Updated 5 years ago
• zibility / Anti-Rootkits
  内核级ARK工具。
  ☆59Updated 9 years ago
• TimelifeCzy / HIPS-HIDS_CveMod
  Windows CVE主防(HIPS/HIDS)
  ☆55Updated 4 years ago
• zodiacon / DllInjectionWithThreadContext
  This is a sample that shows how to leverage SetThreadContext for DLL injection
  ☆83Updated 7 years ago