Alternatives and similar repositories for STrace:

Users that are interested in STrace are comparing it to the libraries listed below

• alexander-hanel / msdocsviewer
  msdocsviewer is a simple tool that parses Microsoft's win32 API and driver documentation to be used within IDA.
  ☆149Updated last year
• Fyyre / DrvMon
  Advanced driver monitoring utility.
  ☆202Updated 2 years ago
• Cr4sh / KernelForge
  A library to develop kernel level Windows payloads for post HVCI era
  ☆383Updated 3 years ago
• commial / ttd-bindings
  Bindings for Microsoft WinDBG TTD
  ☆217Updated last year
• VoidSec / DriverBuddyReloaded
  Driver Buddy Reloaded is an IDA Pro Python plugin that helps automate some tedious Windows Kernel Drivers reverse engineering tasks
  ☆340Updated 3 months ago
• yardenshafir / WinDbg_Scripts
  Useful scripts for WinDbg using the debugger data model
  ☆393Updated 10 months ago
• Sentinel-One / peafl64
  Static Binary Instrumentation tool for Windows x64 executables
  ☆194Updated 3 months ago
• hfiref0x / WubbabooMark
  Debugger Anti-Detection Benchmark
  ☆303Updated last year
• KiFilterFiberContext / warbird-hook
  Using Microsoft Warbird to automatically unpack and execute encrypted shellcode in ClipSp.sys without triggering PatchGuard
  ☆245Updated 2 years ago
• ergrelet / windiff
  Web-based tool that allows comparing symbol, type and syscall information of Microsoft Windows binaries across different versions of the …
  ☆336Updated this week
• zeze-zeze / ioctlance
  A tool that is used to hunt vulnerabilities in x64 WDM drivers
  ☆168Updated last year
• airbus-cert / ttddbg
  Time Travel Debugging IDA plugin
  ☆560Updated 7 months ago
• thesecretclub / SandboxBootkit
  Bootkit for Windows Sandbox to disable DSE/PatchGuard.
  ☆268Updated 3 months ago
• realoriginal / bootlicker
  A generic UEFI bootkit used to achieve initial usermode execution. It works with modifications.
  ☆407Updated last year
• OALabs / hashdb-ida
  HashDB API hash lookup plugin for IDA Pro
  ☆301Updated 3 months ago
• mrexodia / phnt-single-header
  Single header version of System Informer's phnt library.
  ☆192Updated this week
• 0xcpu / ExecutiveCallbackObjects
  Research on Windows Kernel Executive Callback Objects
  ☆284Updated 4 years ago
• sha0coder / mwemu
  x86 malware emulator
  ☆207Updated last week
• Xyrem / HyperDeceit
  HyperDeceit is the ultimate all-in-one library that emulates Hyper-V for Windows, giving you the ability to intercept and manipulate oper…
  ☆361Updated last year
• ionescu007 / clfs-docs
  Unofficial Common Log File System (CLFS) Documentation
  ☆167Updated 3 years ago
• repnz / windbg-cheat-sheet
  My personal cheat sheet for using WinDbg for kernel debugging
  ☆396Updated 3 months ago
• can1357 / NtRays
  Hex-Rays microcode plugin for automated simplification of Windows Kernel decompilation.
  ☆568Updated this week
• hugsy / windbg_js_scripts
  Toy scripts for playing with WinDbg JS API
  ☆223Updated 6 months ago
• enkomio / thematrix
  a PE Loader and Windows API tracer. Useful in malware analysis.
  ☆138Updated 2 years ago
• yardenshafir / PoolViewer
  An application to view and filter pool allocations from a dmp file on Windows 10 RS5+.
  ☆134Updated last year
• 0vercl0k / kdmp-parser
  A Windows kernel dump C++ parser library with Python 3 bindings.
  ☆195Updated 6 months ago
• tandasat / hvext
  The Windbg extension that implements commands helpful to study Hyper-V on Intel processors.
  ☆135Updated 3 weeks ago
• pathtofile / Sealighter
  Sysmon-Like research tool for ETW
  ☆349Updated 2 years ago
• vxcute / WindowsInternals
  Yet another windows internals repo
  ☆205Updated 3 years ago
• mrexodia / AppInitHook
  Global user-mode hooking framework, based on AppInit_DLLs. The goal is to allow you to rapidly develop hooks to inject in an arbitrary pr…
  ☆167Updated 2 years ago