kaimi-io / event-tracing-for-windowsLinks
Library for ETW, ProcessTracker sample based on ETW
☆34Updated 8 years ago
Alternatives and similar repositories for event-tracing-for-windows
Users that are interested in event-tracing-for-windows are comparing it to the libraries listed below
Sorting:
- ☆27Updated 6 years ago
- just an lite AntiRootkit for interesting☆24Updated 10 years ago
- windows LPC library☆42Updated 12 years ago
- Demo List cm/ps/ob/minifilter callback And Patch/Bypass it☆29Updated 8 years ago
- Open Source Libraries Collection☆24Updated 9 years ago
- x64 Kernel Hooks Detection☆24Updated 8 years ago
- ☆33Updated 5 years ago
- An ark tool's driver☆40Updated 8 years ago
- Kinject - kernel dll injector, currently available in x86 version, will be updated to x64 soon.☆32Updated 10 years ago
- Windows Kernel Driver - Create a driver device in TDI layer of windows kernel to capture network data packets☆37Updated 11 years ago
- 大表哥的Syscall-Monitor☆34Updated 6 years ago
- 在Windows上建立一个开源的强制访问控制框架及SDK。使Windows平台的应用开发者,可以不用关心操作系统底层技术,只用进行简单的SDK调用或配置就可以保护自己的应用程序。☆34Updated 9 years ago
- network filter driver that control network send speed, based on windows tdi framework.☆31Updated last year
- ☆14Updated 8 years ago
- it can extract functions from .dll, .exe, .sys and it be work! :)☆40Updated 6 years ago
- 粗暴地枚举管理内核的WFP对象。 Manage kernel WFPs in a brutal way.☆27Updated 7 years ago
- ☆29Updated 4 years ago
- Shareds for kernel developement☆28Updated 11 years ago
- fork HoShiMin Avanguard☆21Updated 7 years ago
- 一个简单的用于win7 x64的驱动级HIPS☆57Updated 9 years ago
- Map memory to user space and manipulate user memory, using capmon☆24Updated 7 years ago
- ☆24Updated 8 years ago
- createfile☆49Updated 10 years ago
- Sysark全称system anti-rootkit,是我学习内核写的工具(2013年的代码,后续不会再更新),里面基本上所有的功能都是用内核实现的。这里只是实现了反rootkit部分功能,作为工具的话,本人觉得还欠完善,但作为学习,或有人需要。目前针对的是XP SP2,…☆27Updated 7 years ago