kkoha / EvtxCarvLinks
recovers and reconstructs fragmented Evtx files from disk images, memory dumps, pagefiles and unallocated space
☆13Updated 10 years ago
Alternatives and similar repositories for EvtxCarv
Users that are interested in EvtxCarv are comparing it to the libraries listed below
Sorting:
- Windows Kernel Mode PCRE☆10Updated 10 years ago
- Handy WMI query tool.☆12Updated 9 years ago
- Windows device tree walker☆15Updated 6 years ago
- Windows registry files interactive viewer☆9Updated 8 years ago
- Framework complet d'analyse de malware☆12Updated 9 years ago
- Common Malware Techniques☆13Updated 2 years ago
- ☆14Updated 10 years ago
- windows内核小工具,包含APP和driver☆11Updated 10 years ago
- PE Infector/Cryptor source code☆15Updated 8 years ago
- ☆29Updated 7 years ago
- ☆12Updated 7 years ago
- x64dbg Malware Plugin. Detect malicious materials☆15Updated 5 years ago
- ☆19Updated 9 years ago
- does reflective dll injection☆8Updated 11 years ago
- simple plugin for lastest olly versions to display the callstack☆16Updated 12 years ago
- ☆10Updated 8 years ago
- Event Tracing for Windows Custom Events☆21Updated 10 years ago
- Google Drive windows virtual unit☆9Updated 11 years ago
- The project is a demo solution for one of the anti-rootkit techniques aimed on overcoming splicers☆34Updated 8 years ago
- Try to transport the tcpip stack of ReactOS to Windows XP.☆17Updated 11 years ago
- A project dedicated towards researching the Windows operating system's kernel mode enviornment.☆8Updated 9 years ago
- ☆10Updated 11 years ago
- Windows hidden thread suspend POC with code injection☆12Updated 8 years ago
- ☆13Updated 7 years ago
- WoW64 -> x64☆19Updated 8 years ago
- hooking KiUserApcDispatcher☆24Updated 8 years ago
- wow64 syscall filter☆13Updated 10 years ago
- Use Windows Management Instrumentation interfaces to perform actions on a Windows system from a Linux System☆16Updated 13 years ago
- A memory engine that scans, debugs and disassembles an applications memory space.☆14Updated 7 years ago
- Legal access: The driver and console app to demonstrate the basic memory access in kernel mode☆9Updated 7 years ago