Alternatives and similar repositories for NpEtw

Users that are interested in NpEtw are comparing it to the libraries listed below

• avalon1610 / LPC

  View on GitHub
  windows LPC library
  ☆43Jun 7, 2013Updated 12 years ago
• codereba / netmon

  View on GitHub
  network filter driver that control network send speed, based on windows tdi framework.
  ☆31Feb 16, 2024Updated last year
• int0 / pinlog

  View on GitHub
  API logger plugin for Intel Pintool
  ☆14Nov 19, 2017Updated 8 years ago
• int0 / ltmdm64_poc

  View on GitHub
  ☆30May 23, 2017Updated 8 years ago
• netromdk / bmod

  View on GitHub
  bmod parses binaries for modification/patching and disassembles machine code sections.
  ☆12Apr 19, 2018Updated 7 years ago
• EvilKnight1986 / Simrep

  View on GitHub
  windows kernel File redirection
  ☆20Sep 21, 2014Updated 11 years ago
• Sha0 / winkexec

  View on GitHub
  Windows KExec
  ☆25Apr 20, 2010Updated 15 years ago
• rwfpl / rewolf-ldrdebug

  View on GitHub
  Helper utility for debugging windows PE/PE+ loader.
  ☆52Mar 15, 2015Updated 10 years ago
• MartinDrab / Hackerfest2015

  View on GitHub
  Demos presented on Hackerfest 2015
  ☆14Nov 9, 2015Updated 10 years ago
• long123king / PE-Replay

  View on GitHub
  This is a pintool that can analyze target dynamically and output code blocks and "key frames".
  ☆14Mar 26, 2015Updated 10 years ago
• imgits / ShellcodeVM

  View on GitHub
  ShellcodeVM
  ☆15Jun 20, 2016Updated 9 years ago
• sin5678 / wow64hook

  View on GitHub
  wow64 syscall filter
  ☆13Nov 12, 2014Updated 11 years ago
• louk78 / Virgo

  View on GitHub
  Minifilter Driver
  ☆15Feb 10, 2017Updated 9 years ago
• n3k / EKOParty2015_Windows_SMEP_Bypass

  View on GitHub
  Windows SMEP Bypass U=S
  ☆38Apr 8, 2016Updated 9 years ago
• AlephNull314 / AbsoluteZero

  View on GitHub
  Anti-AV compilation
  ☆44Oct 4, 2013Updated 12 years ago
• georgenicolaou / HeavenInjector

  View on GitHub
  Simple proof of concept code for injecting libraries on 64bit processes from a 32bit process
  ☆96Oct 12, 2018Updated 7 years ago
• al-homedawy / InjecTOR

  View on GitHub
  A Windows driver used to facilitate DLL injection
  ☆27Oct 29, 2017Updated 8 years ago
• uniking / TDI-Demo

  View on GitHub
  ☆17Mar 3, 2016Updated 9 years ago
• packetzero / etwrealtime

  View on GitHub
  Example of real-time Windows ETW packet capture session
  ☆54Jul 12, 2017Updated 8 years ago
• Vatyx / NamedPipeCapture

  View on GitHub
  A Windows tool that can be used to stream data from named pipe between two other process to Wireshark
  ☆112Dec 12, 2017Updated 8 years ago
• jdu2600 / Windows10EtwEvents

  View on GitHub
  Events from all manifest-based and mof-based ETW providers across Windows 10 versions
  ☆329May 2, 2024Updated last year
• swatkat / arkitlib

  View on GitHub
  Windows anti-rootkit library
  ☆37Mar 15, 2015Updated 10 years ago
• libyal / libfwevt

  View on GitHub
  Library for Windows XML Event Log (EVTX) data types
  ☆18Dec 17, 2025Updated last month
• shishir993 / debugger

  View on GitHub
  Windows PE file debugger
  ☆11Aug 30, 2017Updated 8 years ago
• zer0mem / VadScanner

  View on GitHub
  PoC of BOOST-ed _EPROCESS.VadRoot iterating
  ☆27May 21, 2014Updated 11 years ago
• long123king / TokenInsight

  View on GitHub
  An application for obtaining, dumping and modifying token from user land.
  ☆26Nov 21, 2015Updated 10 years ago
• steveniemitz / SDbgExt2

  View on GitHub
  ☆28Aug 24, 2014Updated 11 years ago
• dgros / Remote_Malware_Analyzer

  View on GitHub
  Sandbox d'analyse de malware pour Windows 7 avec un client TCP en mode noyau
  ☆19Feb 23, 2016Updated 9 years ago
• kolomenkin / TaskManagerEx

  View on GitHub
  Task Manager Extension for Windows
  ☆13Jul 9, 2015Updated 10 years ago
• hufuman / spy2nd

  View on GitHub
  enhanced spy++
  ☆10Feb 7, 2014Updated 12 years ago
• adrianyy / nasm_shellcode

  View on GitHub
  NASM listing to shellcode converter
  ☆14May 6, 2018Updated 7 years ago
• Neo23x0 / neolog

  View on GitHub
  Windows Syslog Command Line Client
  ☆15Nov 21, 2012Updated 13 years ago
• maxtruxa / WinHook

  View on GitHub
  Windows library for hooking functions across processes, injecting DLLs into other applications, and more. (Somewhat similar to MS Detours…
  ☆12Apr 2, 2013Updated 12 years ago
• phofman / signature

  View on GitHub
  Utility tool to help digitally sign applications (binaries) on Windows.
  ☆13Jun 8, 2015Updated 10 years ago
• kernullist / krn_pcre

  View on GitHub
  Windows Kernel Mode PCRE
  ☆10Feb 4, 2015Updated 11 years ago
• ztony478 / Win_Dev_Driver_Code

  View on GitHub
  Windows设备驱动开发 光盘（示例代码）
  ☆10Jan 14, 2013Updated 13 years ago
• nopper / maltrace

  View on GitHub
  Maltrace is a simple syscall tracer for Windows implemented through the use of PIN.
  ☆24Apr 10, 2013Updated 12 years ago
• wangzhan / CrashReport

  View on GitHub
  Crash report lib and exe for windows application
  ☆19Dec 26, 2014Updated 11 years ago
• russellklenk / ETW

  View on GitHub
  Event Tracing for Windows Custom Events
  ☆21Jan 28, 2015Updated 11 years ago