Alternatives and similar repositories for event-tracing-for-windows

Users that are interested in event-tracing-for-windows are comparing it to the libraries listed below

• AntiRootkit / BDArkit
  just an lite AntiRootkit for interesting
  ☆24Updated 9 years ago
• xiaobfly / AnalyzePdb
  ☆27Updated 6 years ago
• KelvinMsft / ScreenCapAttack
  ☆33Updated 4 years ago
• gerronjo / openlibs
  Open Source Libraries Collection
  ☆24Updated 9 years ago
• michael4338 / TDI
  Windows Kernel Driver - Create a driver device in TDI layer of windows kernel to capture network data packets
  ☆37Updated 11 years ago
• avalon1610 / LPC
  windows LPC library
  ☆42Updated 12 years ago
• rwfpl / rewolf-ldrdebug
  Helper utility for debugging windows PE/PE+ loader.
  ☆52Updated 10 years ago
• codereba / netmon
  network filter driver that control network send speed, based on windows tdi framework.
  ☆31Updated last year
• binbibi / CallbackEx
  Demo List cm/ps/ob/minifilter callback And Patch/Bypass it
  ☆29Updated 7 years ago
• russellklenk / ETW
  Event Tracing for Windows Custom Events
  ☆21Updated 10 years ago
• zhuhuibeishadiao / KernelHooksDetection_x64
  x64 Kernel Hooks Detection
  ☆24Updated 8 years ago
• hedgeh / SEWindows
  在Windows上建立一个开源的强制访问控制框架及SDK。使Windows平台的应用开发者，可以不用关心操作系统底层技术，只用进行简单的SDK调用或配置就可以保护自己的应用程序。
  ☆34Updated 9 years ago
• zer0mem / KernelProject
  Plain project for usege with github/zer0mem/common.git
  ☆48Updated 11 years ago
• tandasat / DrvLoader
  A command line tool to load and unload a device driver.
  ☆47Updated 8 years ago
• OlSut / Kinject-x64
  Kinject - kernel dll injector, currently available in x86 version, will be updated to x64 soon.
  ☆32Updated 10 years ago
• tandasat / hyperplatform_log_parser
  User-mode program parsing logs created by HyperPlatform
  ☆18Updated 9 years ago
• EvilKnight1986 / Simrep
  windows kernel File redirection
  ☆20Updated 11 years ago
• Kerisa / HIPS-Light
  一个简单的用于win7 x64的驱动级HIPS
  ☆57Updated 9 years ago
• jnastarot / soul_eater
  it can extract functions from .dll, .exe, .sys and it be work! :)
  ☆39Updated 6 years ago
• packetzero / etwrealtime
  Example of real-time Windows ETW packet capture session
  ☆53Updated 8 years ago
• BrunoMCBraga / Kernel-Whisperer
  ☆29Updated 4 years ago
• wjcsharp / Common
  Shareds for kernel developement
  ☆28Updated 11 years ago
• wyrover / CodeLib
  常用代码类
  ☆13Updated 11 years ago
• zer0mem / VadScanner
  PoC of BOOST-ed _EPROCESS.VadRoot iterating
  ☆26Updated 11 years ago
• KelvinMsft / SyncJobs_MPSystem
  ☆14Updated 7 years ago
• AzureGreen / ArkToolDrv
  An ark tool's driver
  ☆40Updated 8 years ago
• pstolarz / dumpext
  WinDbg debugger extension library providing various tools to analyse, dump and fix (restore) Microsoft Portable Executable files for both…
  ☆84Updated last year
• DownWithUp / WhoCalls_C
  WhoCalls can query a directory of files, find the binaries, and search for a user specified Win API import. It and works with both 32-bit…
  ☆18Updated 3 years ago
• qiantangbanmu / WProtectvs
  ☆24Updated 7 years ago
• kedebug / ScDetective
  A kernel level anti-rootkit tool which runs on the windows platform.
  ☆84Updated 11 years ago