jpassing / ntrace
NTrace -- a function boundary tracing tool for Windows user and kernel mode
☆22Updated 11 years ago
Alternatives and similar repositories for ntrace:
Users that are interested in ntrace are comparing it to the libraries listed below
- Event Tracing for Windows Custom Events☆21Updated 10 years ago
- Simple error lookup for Win32 and NTSTATUS errors☆17Updated 6 years ago
- My commands and scripts extending WinDbg☆31Updated this week
- User-mode program parsing logs created by HyperPlatform☆18Updated 8 years ago
- Simple command line version of Sysinternals WinObj. Currently just lists object names and types given an object manager directory.☆19Updated last year
- A Hobbyist Operating System based off the ReactOS/NT Kernel experimenting with OS Development.☆26Updated 12 years ago
- penter hook example and driver time recorder☆31Updated 7 years ago
- Lists work items being queued currently.☆13Updated 9 years ago
- Notes my learning steps about Windows-NT☆23Updated 7 years ago
- An alternative tool to Sysinternals WinObj tool (nicer icons!)☆34Updated 6 years ago
- INF Studio for easier working with driver installation files☆36Updated last year
- A tool to investigate the Windows device manager☆14Updated 6 years ago
- The internal Windows structures hack to create the in-process private ETW session☆13Updated 7 years ago
- Full reversing of the Microsoft Auxiliary Windows API Library and ported to C☆23Updated last month
- Static library and headers for linking your software with ntdll.dll☆32Updated 5 years ago
- DTrace for Windows in userspace; Frontend to ETW☆27Updated 2 years ago
- Diff tool for comparing export tables in PE images☆24Updated 4 years ago
- use crystalCPUID to identify vt-x & amd-v☆16Updated 9 years ago
- User-mode kernel callback framework☆10Updated 11 years ago
- Windows NT port of 'Main is usually a function. So then when is it not?'☆25Updated 11 months ago
- C++ wrapper for the Windows structured storage implementation known as Compound Files☆19Updated 4 years ago
- WinDbg scripting language utilities.☆11Updated 4 years ago
- simple plugin for lastest olly versions to display the callstack☆16Updated 11 years ago
- Scripts to prepare Windows system for debugging.☆30Updated 4 years ago
- Decompile an x86 exe, and read PE infos.☆19Updated 6 years ago
- Native Development Kit for Vista 64bit And Later, by me, Based on NDK Headers 1.0, by Alex Ionescu☆16Updated 9 years ago
- Demonstrate the new FileDispositionInfoEx behavior☆14Updated 7 years ago
- Various libraries focused on examining/parsing NTFS-specific structures☆16Updated 9 years ago
- Various WinDbg extensions and scripts☆31Updated 6 years ago
- ☆13Updated 9 years ago