Alternatives and similar repositories for event-tracing-for-windows

Users that are interested in event-tracing-for-windows are comparing it to the libraries listed below

• gerronjo / openlibs
  Open Source Libraries Collection
  ☆24Updated 9 years ago
• binbibi / CallbackEx
  Demo List cm/ps/ob/minifilter callback And Patch/Bypass it
  ☆29Updated 8 years ago
• KelvinMsft / ScreenCapAttack
  ☆35Updated 5 years ago
• avalon1610 / LPC
  windows LPC library
  ☆43Updated 12 years ago
• xiaobfly / AnalyzePdb
  ☆27Updated 6 years ago
• AzureGreen / ArkToolDrv
  An ark tool's driver
  ☆40Updated 8 years ago
• michael4338 / TDI
  Windows Kernel Driver - Create a driver device in TDI layer of windows kernel to capture network data packets
  ☆37Updated 11 years ago
• AntiRootkit / BDArkit
  just an lite AntiRootkit for interesting
  ☆24Updated 10 years ago
• jnastarot / soul_eater
  it can extract functions from .dll, .exe, .sys and it be work! :)
  ☆40Updated 6 years ago
• BrunoMCBraga / Kernel-Whisperer
  ☆29Updated 4 years ago
• wjcsharp / Common
  Shareds for kernel developement
  ☆29Updated 12 years ago
• rwfpl / rewolf-ldrdebug
  Helper utility for debugging windows PE/PE+ loader.
  ☆52Updated 10 years ago
• alexvogt91 / NetDriver
  kernel-mode TDI client which can send and receive HTTP requests
  ☆56Updated 7 years ago
• hedgeh / SEWindows
  在Windows上建立一个开源的强制访问控制框架及SDK。使Windows平台的应用开发者，可以不用关心操作系统底层技术，只用进行简单的SDK调用或配置就可以保护自己的应用程序。
  ☆34Updated 9 years ago
• zer0mem / KernelProject
  Plain project for usege with github/zer0mem/common.git
  ☆48Updated 11 years ago
• lololosys / TitanHideWindbgPlugin-
  ☆14Updated 8 years ago
• zer0mem / VadScanner
  PoC of BOOST-ed _EPROCESS.VadRoot iterating
  ☆27Updated 11 years ago
• zhuhuibeishadiao / KernelHooksDetection_x64
  x64 Kernel Hooks Detection
  ☆24Updated 8 years ago
• codereba / netmon
  network filter driver that control network send speed, based on windows tdi framework.
  ☆31Updated last year
• DOGSHITD / IDTHook_X64
  Hook IDT vector 0xb2 to detect SCI in 64bit windows.
  ☆34Updated 3 years ago
• kernweak / Syscall-Monitor
  大表哥的Syscall-Monitor
  ☆34Updated 6 years ago
• eladraz / XDK
  XDK is a fully featured C++ wrapper library for Windows kernel development
  ☆21Updated 9 years ago
• Iamgublin / libemu_pe
  enable libemu run pe file and add some good modify
  ☆14Updated 6 years ago
• uvbs / VMPDBG2
  ☆37Updated 10 years ago
• jnastarot / native_peloader
  PE(compressed dll) memory loader using nt api
  ☆46Updated 8 years ago
• AndrewGaspar / km-stl
  A drop-in replacement for the C++ STL for kernel mode Windows drivers. The goal is to have implementations for things like the standard a…
  ☆32Updated 9 years ago
• changeofpace / x64dbg-Anti-Debug-POC
  viewing page boundaries of pages with PAGE_NOACCESS protection reveals the presence of x64dbg.
  ☆25Updated 8 years ago
• zibility / Anti-Rootkits
  内核级ARK工具。
  ☆62Updated 9 years ago
• MeeSong / Sunstrider
  Analyze PatchGuard
  ☆57Updated 7 years ago
• 9176324 / SyscallTable
  ☆33Updated 7 years ago