eronnen / procmon-parserLinks
Parser to process monitor file formats
☆156Updated 3 months ago
Alternatives and similar repositories for procmon-parser
Users that are interested in procmon-parser are comparing it to the libraries listed below
Sorting:
- A collection of free miscellaneous Windows tools☆140Updated 5 months ago
- WNF Utilities 4 Newbies (WNFUN)☆100Updated 7 years ago
- CallMon is an experimental system call monitoring tool that works on Windows 10 versions 2004+ using PsAltSystemCallHandlers☆144Updated 5 years ago
- Hyper-V Research is trendy now☆191Updated last year
- Official VirusTotal plugin for IDA Pro☆176Updated last month
- Extract AutoIt scripts embedded in PE binaries☆216Updated last year
- Two IDAPython Scripts help you to reconstruct Microsoft COM (Component Object Model) Code☆184Updated 5 years ago
- Toy scripts for playing with WinDbg JS API☆242Updated last year
- Simple windows API logger☆109Updated 6 years ago
- Parse .NET executable files.☆82Updated 4 months ago
- Metadata hash incorporating the Rich Header for robustness against packing and other malware tricks☆70Updated 4 years ago
- Named pipe I/O ETW provider for Windows☆71Updated 5 years ago
- Parsers for custom malware formats ("Funky malware formats")☆98Updated 4 years ago
- ShowStopper is a tool for helping malware researchers explore and test anti-debug techniques or verify debugger plugins or other solution…☆219Updated 3 years ago
- ☆140Updated 4 years ago
- ☆73Updated 2 years ago
- ☆128Updated 5 years ago
- Hyper-V scripts☆135Updated last month
- IDA Pro plugin for recognizing known hashes of API function names☆83Updated 3 years ago
- Set of antianalysis techniques found in malware☆133Updated 2 years ago
- ☆68Updated 3 years ago
- Driver Initial Reconnaissance Tool☆125Updated 6 years ago
- A DTrace on Windows Reimplementation☆368Updated 3 months ago
- An IDA Pro extension for easier (malware) reverse engineering☆116Updated 3 years ago
- WIP Emotet Control Flow Unflattening using miasm and radare2☆23Updated 3 years ago
- API Logger for Windows Executables☆80Updated 5 years ago
- FileInsight-plugins: decoding toolbox of McAfee FileInsight hex editor for malware analysis☆163Updated last year
- The history of Windows Internals via symbols.☆181Updated 4 years ago
- GarbageMan is a set of tools for analyzing .NET binaries through heap analysis.☆118Updated 2 years ago
- Events from all manifest-based and mof-based ETW providers across Windows 10 versions☆325Updated last year