Alternatives and similar repositories for event-tracing-for-windows

Users that are interested in event-tracing-for-windows are comparing it to the libraries listed below

• avalon1610 / LPC
  windows LPC library
  ☆42Updated 12 years ago
• xiaobfly / AnalyzePdb
  ☆27Updated 6 years ago
• binbibi / CallbackEx
  Demo List cm/ps/ob/minifilter callback And Patch/Bypass it
  ☆29Updated 7 years ago
• michael4338 / TDI
  Windows Kernel Driver - Create a driver device in TDI layer of windows kernel to capture network data packets
  ☆37Updated 11 years ago
• AntiRootkit / BDArkit
  just an lite AntiRootkit for interesting
  ☆24Updated 9 years ago
• KelvinMsft / ScreenCapAttack
  ☆33Updated 5 years ago
• jnastarot / soul_eater
  it can extract functions from .dll, .exe, .sys and it be work! :)
  ☆39Updated 6 years ago
• zhuhuibeishadiao / KernelHooksDetection_x64
  x64 Kernel Hooks Detection
  ☆24Updated 8 years ago
• cclon / Proteibox
  a sandbox project by sudami
  ☆17Updated 7 years ago
• gerronjo / openlibs
  Open Source Libraries Collection
  ☆24Updated 9 years ago
• alexvogt91 / NetDriver
  kernel-mode TDI client which can send and receive HTTP requests
  ☆55Updated 7 years ago
• codereba / netmon
  network filter driver that control network send speed, based on windows tdi framework.
  ☆31Updated last year
• AzureGreen / ArkToolDrv
  An ark tool's driver
  ☆40Updated 8 years ago
• lololosys / TitanHideWindbgPlugin-
  ☆14Updated 8 years ago
• wjcsharp / Common
  Shareds for kernel developement
  ☆28Updated 11 years ago
• OlSut / Kinject-x64
  Kinject - kernel dll injector, currently available in x86 version, will be updated to x64 soon.
  ☆32Updated 10 years ago
• hedgeh / SEWindows
  在Windows上建立一个开源的强制访问控制框架及SDK。使Windows平台的应用开发者，可以不用关心操作系统底层技术，只用进行简单的SDK调用或配置就可以保护自己的应用程序。
  ☆34Updated 9 years ago
• GravitLauncher / Avanguard
  fork HoShiMin Avanguard
  ☆21Updated 7 years ago
• kedebug / ScDetective
  A kernel level anti-rootkit tool which runs on the windows platform.
  ☆84Updated 11 years ago
• zer0mem / VadScanner
  PoC of BOOST-ed _EPROCESS.VadRoot iterating
  ☆26Updated 11 years ago
• changeofpace / x64dbg-Anti-Debug-POC
  viewing page boundaries of pages with PAGE_NOACCESS protection reveals the presence of x64dbg.
  ☆24Updated 8 years ago
• 9176324 / SyscallTable
  ☆33Updated 7 years ago
• TaoistBrickscarrier / WFPKit
  粗暴地枚举管理内核的WFP对象。 Manage kernel WFPs in a brutal way.
  ☆27Updated 7 years ago
• zibility / Anti-Rootkits
  内核级ARK工具。
  ☆62Updated 9 years ago
• mq1n / Wow64SyscallHook
  Wow64 syscall hook
  ☆41Updated 8 years ago
• sin5678 / A-Protect
  A-Protect Anti Rootkit Tool
  ☆54Updated 11 years ago
• AndrewGaspar / km-stl
  A drop-in replacement for the C++ STL for kernel mode Windows drivers. The goal is to have implementations for things like the standard a…
  ☆32Updated 9 years ago
• rwfpl / rewolf-ldrdebug
  Helper utility for debugging windows PE/PE+ loader.
  ☆52Updated 10 years ago
• ZaneLogi / DevConWin
  A tool to investigate the Windows device manager
  ☆12Updated 6 years ago
• hostzhen / sysark
  Sysark全称system anti-rootkit，是我学习内核写的工具（2013年的代码，后续不会再更新），里面基本上所有的功能都是用内核实现的。这里只是实现了反rootkit部分功能，作为工具的话，本人觉得还欠完善，但作为学习，或有人需要。目前针对的是XP SP2，…
  ☆27Updated 7 years ago