Alternatives and similar repositories for FileTest:

Users that are interested in FileTest are comparing it to the libraries listed below

• MartinDrab / IRPMon
  The goal of the tool is to monitor requests received by selected device objects or kernel drivers. The tool is quite similar to IrpTracke…
  ☆385Updated 3 months ago
• zodiacon / DriverMon
  Monitor activity of any driver
  ☆334Updated 4 years ago
• wbenny / DetoursNT
  Detours with just single dependency - NTDLL
  ☆632Updated 2 years ago
• anhkgg / awesome-windbg-extensions
  awesome windbg extensions
  ☆327Updated 6 years ago
• avakar / vcrtl
  C++ Exceptions in Windows Drivers
  ☆207Updated 4 years ago
• repnz / windbg-cheat-sheet
  My personal cheat sheet for using WinDbg for kernel debugging
  ☆414Updated this week
• 0xcpu / ExecutiveCallbackObjects
  Research on Windows Kernel Executive Callback Objects
  ☆286Updated 5 years ago
• hugsy / windbg_js_scripts
  Toy scripts for playing with WinDbg JS API
  ☆227Updated 9 months ago
• progmboy / openprocmon
  open source process monitor
  ☆266Updated last year
• swwwolf / wdbgark
  WinDBG Anti-RootKit Extension
  ☆628Updated 4 years ago
• AndreyBazhan / SymStore
  The history of Windows Internals via symbols.
  ☆176Updated 3 years ago
• zodiacon / ProcMonXv2
  Process Monitor X v2
  ☆607Updated last year
• hfiref0x / NtCall64
  Windows NT x64 syscall fuzzer
  ☆602Updated last year
• rogerorr / NtTrace
  An strace-like program for the Windows 'native' API
  ☆264Updated last week
• gerhart01 / LiveCloudKd
  Hyper-V Research is trendy now
  ☆160Updated last month
• zodiacon / ProcMonX
  Extended Process Monitor-like tool based on Event Tracing for Windows
  ☆470Updated 5 years ago
• ionescu007 / HookingNirvana
  Recon 2015 Presentation from Alex Ionescu
  ☆233Updated 9 years ago
• ntdiff / headers
  ☆160Updated 6 months ago
• sysprogs / VirtualKD
  ☆226Updated 3 years ago
• repnz / etw-providers-docs
  Document ETW providers
  ☆228Updated 5 years ago
• wbenny / EtwConsumerNT
  Simple project that demonstrates how an ETW consumer can be created just by using NTDLL
  ☆140Updated 6 years ago
• hugsy / CFB
  Canadian Furious Beaver is a ProcMon-style tool designed only for capturing IRPs sent to any Windows driver.
  ☆318Updated last year
• sam-b / windows_kernel_address_leaks
  Examples of leaking Kernel Mode information from User Mode on Windows
  ☆597Updated 7 years ago
• 0cch / 0cchext
  0CCh Windbg extension: include some useful commands
  ☆111Updated last year
• 0xcpu / WinAltSyscallHandler
  Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999
  ☆209Updated 5 years ago
• ntdiff / ntdiff
  ☆126Updated 6 months ago
• jdu2600 / Windows10EtwEvents
  Events from all manifest-based and mof-based ETW providers across Windows 10 versions
  ☆294Updated 11 months ago
• DownWithUp / ALPC-Example
  An example of a client and server using Windows' ALPC functions to send and receive data.
  ☆95Updated 3 months ago
• SinaKarvandi / Process-Magics
  This is a collection of interesting codes about Windows Process creation.
  ☆232Updated last year
• msuiche / LiveCloudKd
  Hyper-V Research is trendy now
  ☆178Updated 11 months ago