Alternatives and similar repositories for Windows-Insight:

Users that are interested in Windows-Insight are comparing it to the libraries listed below

• palantir / exploitguard
  Documentation and supporting script sample for Windows Exploit Guard
  ☆148Updated 3 years ago
• OmerYa / Named-Pipe-Sniffer
  Mario & Luigi - Tools for sniffing Windows Named Pipes communication
  ☆129Updated 8 years ago
• jthuraisamy / DIRT
  Driver Initial Reconnaissance Tool
  ☆121Updated 5 years ago
• Cyb3rWard0g / WinRpcFunctions
  ☆67Updated 2 years ago
• jthuraisamy / ioctlpus
  ☆107Updated 4 years ago
• tyranid / windows-logical-eop-workshop
  ☆231Updated 7 years ago
• mandiant / flare-kscldr
  FLARE Kernel Shellcode Loader
  ☆175Updated 5 years ago
• ustayready / CasperStager
  PoC for persisting .NET payloads in Windows Notification Facility (WNF) state names using low-level Windows Kernel API calls.
  ☆148Updated 5 years ago
• endgameinc / ClrGuard
  ☆213Updated 6 years ago
• SafeBreach-Labs / BITSInject
  A one-click tool to inject jobs into the BITS queue (Background Intelligent Transfer Service), allowing arbitrary program execution as th…
  ☆98Updated 5 years ago
• kobykahane / NpEtw
  Named pipe I/O ETW provider for Windows
  ☆69Updated 4 years ago
• CyberPoint / Ruxcon2016ETW
  Ruxcon2016 POC Code
  ☆137Updated 8 years ago
• msuiche / LiveCloudKd
  Hyper-V Research is trendy now
  ☆177Updated 9 months ago
• hasherezade / funky_malware_formats
  Parsers for custom malware formats ("Funky malware formats")
  ☆93Updated 3 years ago
• jdu2600 / Windows10EtwEvents
  Events from all manifest-based and mof-based ETW providers across Windows 10 versions
  ☆286Updated 9 months ago
• ionescu007 / wnfun
  WNF Utilities 4 Newbies (WNFUN)
  ☆93Updated 6 years ago
• REal0day / MaliciousPark
  Another Repo of Malware. Enjoy. <3
  ☆60Updated 5 years ago
• tyranid / DeviceGuardBypasses
  A repository of some of my Windows 10 Device Guard Bypasses
  ☆134Updated 7 years ago
• MohitDabas / malwinx
  Just a normal flask web app to understand win32api with code snippets and references.
  ☆72Updated 5 years ago
• KasperskyLab / VBscriptInternals
  Scripts for disassembling VBScript p-code in the memory to aid in exploits analysis
  ☆84Updated 2 years ago
• williballenthin / python-sdb
  Pure Python parser for Application Compatibility Shim Databases (.sdb files)
  ☆108Updated 4 years ago
• ohjeongwook / ShellCodeEmulator
  Shellcode emulator written with Unicorn Framework With Process Dump Emulation Environment
  ☆119Updated 4 years ago
• 0xAlexei / WindowsDefenderTools
  Tools for instrumenting Windows Defender's mpengine.dll
  ☆292Updated 6 years ago
• SouhailHammou / Drivers
  Windows Drivers
  ☆97Updated 5 years ago
• zacbrown / PowerKrabsEtw
  PowerKrabsEtw is a PowerShell interface for doing real-time ETW tracing.
  ☆103Updated 4 years ago
• Dump-GUY / ghidra_scripts
  ☆67Updated last year
• hugsy / windbg_js_scripts
  Toy scripts for playing with WinDbg JS API
  ☆224Updated 7 months ago
• vagnerpilar / windbgtree
  A command tree based on commands and extensions for Windows Kernel Debugging.
  ☆107Updated 4 years ago
• felixweyne / ProcessSpawnControl
  Process Spawn Control is a Powershell tool which aims to help in the behavioral (process) analysis of malware. PsC suspends newly launche…
  ☆261Updated 3 years ago
• nccgroup / DIBF
  Windows NT ioctl bruteforcer and modular fuzzer
  ☆121Updated 6 years ago