Alternatives and similar repositories for Anti-Rootkit

Users that are interested in Anti-Rootkit are comparing it to the libraries listed below

• Broihon / Symbol-Parser
  Small class to parse debug info from PEs, download their respective PDBs from the Microsoft Public Symbol Server and calculate RVAs of fu…
  ☆43Updated 2 years ago
• nmgwddj / A-Protect
  ☆24Updated 7 years ago
• kouzhudong / libdrv
  Static Library For Windows Drivers
  ☆36Updated 5 months ago
• DearXiaoGui / InfinityHookPro-main
  ☆53Updated 2 years ago
• DragonQuestHero / Kernel-Force-Delete
  force delete runing .exe application file.or delete any locked file
  ☆73Updated 2 years ago
• amateurVV / AmateurVT
  ☆27Updated last year
• HOOK11 / WindowProtect
  Etw hook 查找窗口相关内核函数 实现窗口保护 适用于Win10
  ☆24Updated last year
• SHA-MRIZ / FsMinfilterHooking
  ☆31Updated 4 years ago
• DragonQuestHero / DriverLoaderPro
  windows kernel deriver loader(pro)
  ☆47Updated 4 years ago
• DragonQuestHero / QT-Process-Protect
  GUI Kernel driver process protect tool
  ☆38Updated 7 years ago
• KelvinMsft / PerfMon
  first commit
  ☆63Updated 4 years ago
• 9176324 / Daat
  a simple intel vt code both support x86 & x64. PatchGuard monitor.
  ☆76Updated 3 years ago
• zhuhuibeishadiao / WskHttp
  Windows kernel drivers simple HTTP library for modern C++
  ☆42Updated 7 years ago
• msmania / hk
  Injector with kernel power
  ☆16Updated 4 years ago
• MiroKaku / Learning-Example
  For Example. See Miro's Blog
  ☆30Updated 2 years ago
• zhuhuibeishadiao / JunkDriveOpenSource
  Some garbage drivers written for getting started
  ☆66Updated 5 years ago
• FiYHer / dxgkrnl_hook_ex
  以前改进的cheat内核通信模块,现在EAC Detected,现在发出来
  ☆51Updated 4 years ago
• bytesundso / SneakCalls
  direct systemcalls with a modern c++20 interface.
  ☆43Updated 2 years ago
• anzelesnik / MySyscall
  Example of hijacking system calls via function pointer tables
  ☆31Updated 4 years ago
• stdhu / windows-kernel-pagehook
  windows kernel pagehook
  ☆40Updated 2 years ago
• luciouskami / RemoveFlagTest
  Another method to anti ThreadHideFromDebugger
  ☆36Updated 6 years ago
• NewWorldComingSoon / UnknownField
  UnknownField is a tool based clang that obfuscating the order of fields to protect your C/C++ game or code.
  ☆44Updated 2 years ago
• yqsy / VT_demo
  ☆27Updated 7 years ago
• gmh5225 / kcpplib
  The driver STL library used by myself
  ☆13Updated 2 years ago
• fly55555 / ExdiGdbSrv
  WinDbg-Samples ExdiGdbSrv fork 修复了一部分Vmware调试的问题
  ☆30Updated 2 years ago
• fIappy / FpVTProject
  intel vt-x hypervisor ept
  ☆25Updated 5 years ago
• kanren3 / minhook-native
  Based on minhook
  ☆31Updated last year
• ranni0225 / WRK
  Windows Research Kernel VS2022 Solution
  ☆34Updated 11 months ago
• TimelifeCzy / kHypervisorBasic
  VT Hook
  ☆47Updated last year
• KelvinMsft / UsbMon
  ☆36Updated 4 years ago