Alternatives and similar repositories for Sysmon_reverse

Users that are interested in Sysmon_reverse are comparing it to the libraries listed below

• stonedreamforest / re_sysdiag
  逆向火绒安全软件驱动——sysdiag
  ☆157Updated 7 years ago
• dybb8999 / Windows-kernel-security-and-driver-development-CD
  Windows内核安全与驱动开发书附赠的光盘源码
  ☆94Updated 7 years ago
• leeqwind / PESignAnalyzer
  This program can retrieve signature information from PE files which signed by one or more certificates on Windows. Supporting multi-signe…
  ☆103Updated 3 years ago
• devilogic / cerberus
  win32下的虚拟机保护壳
  ☆141Updated 10 years ago
• ChengChengCC / Ark-tools
  Windows Ark 工具的工程和一些demo
  ☆191Updated 9 years ago
• alphaSeclab / anti-debug
  ☆117Updated 7 years ago
• wanttobeno / Win64DriverStudy_Src
  WIN64驱动编程基础教程-源码 作者：胡文亮
  ☆88Updated 7 years ago
• chinatiny / WindowsPlatform
  ☆97Updated 4 years ago
• minglinchen / WinKernelDev
  ☆138Updated 5 years ago
• zzhouhe / PG1903
  ☆116Updated 6 years ago
• AzureGreen / ArkProtect
  An Ark tool project，run on Win7 x86/x64
  ☆115Updated 8 years ago
• FaEryICE / MemScanner
  Analyze Windows x64 Kernel Memory Layout
  ☆124Updated 4 years ago
• huoji120 / Heuristic_antivirus_engine_by_huoji
  基于UC的启发式杀毒引擎[还没做完]
  ☆35Updated 4 years ago
• zodiacon / ALPCLogger
  Log ALPC activity
  ☆84Updated 2 years ago
• reinhardvz / wsk
  Automatically exported from code.google.com/p/wskudp
  ☆43Updated 9 years ago
• tombkeeper / Shellcode_Template_in_C
  ☆147Updated 5 years ago
• BOT-Man-JL / WFP-Traffic-Redirection-Driver
  WFP Traffic Redirection Driver is used to redirect NIC traffic on network layer and framing layer, based on Windows Filtering Platform (W…
  ☆114Updated 7 years ago
• stonedreamforest / re_avkmgr
  逆向小红伞杀毒软件驱动——avkmgr
  ☆71Updated 7 years ago
• Microwave89 / rtsectiontest
  An Attempt to Bypass Memory Scanners By Misusing the ntdll.dll "RT" Section.
  ☆97Updated 9 years ago
• brock7 / WRK1.2
  ☆10Updated 9 years ago
• DeDf / DownloadPDB
  ☆38Updated 6 years ago
• HARM4Y / Minifilter
  参考《Windows内核安全与驱动开发》的透明加密解密Minifilter
  ☆72Updated 3 years ago
• andylau004 / LookDrvCode
  LookDrvCode
  ☆31Updated 11 years ago
• zhuhuibeishadiao / MiniVTx64
  Intel Virtualization Technology demo
  ☆69Updated 8 years ago
• namjkee / ssdt.Recover.21yu3
  绕过卡巴斯基主动防御,加载驱动，unhook所有ssdt hook及shadow ssdt hook
  ☆38Updated 10 years ago
• xiaofen9 / SSDTHOOK
  An SSDT hook for Windows
  ☆61Updated 7 years ago
• haidragon / ReflectiveInjection
  反射式注入
  ☆29Updated 6 years ago
• BlackINT3 / none
  UNONE and KNONE is a couple of open source base library that makes it easy to develop software on Windows.
  ☆162Updated 2 years ago
• daterlove / ActiveDefense
  小型主动防御引擎
  ☆57Updated 9 years ago
• OfficialKatana / MemDllLoader
  加载内存当中的DLL文件
  ☆84Updated 7 years ago