The common parts of the Sysinternals Sysmon tool shared between the Windows and Linux versions.
☆63Apr 23, 2026Updated 3 months ago
Alternatives and similar repositories for SysmonCommon
Users that are interested in SysmonCommon are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- INF Studio for easier working with driver installation files☆39Nov 11, 2023Updated 2 years ago
- DTrace for Windows in userspace; Frontend to ETW☆26Oct 4, 2022Updated 3 years ago
- windows内核安全与驱动开发代码☆12Apr 4, 2020Updated 6 years ago
- The Linux port of the Sysinternals Sysmon tool.☆286May 7, 2026Updated 3 months ago
- An attempt at reversing WindowsDefender☆19Oct 6, 2024Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Data and structures regarding the research done on WdFilter☆12Apr 15, 2020Updated 6 years ago
- Show Window Stations, Desktops and top level windows☆17Jun 10, 2023Updated 3 years ago
- $I30 INDX Carver☆18Jun 23, 2025Updated last year
- Packet Injection With WFP☆16Jun 5, 2026Updated 2 months ago
- Analyze Windows x64 Kernel Memory Layout☆133Nov 19, 2020Updated 5 years ago
- An IDA plugin to deal with Event Tracing for Windows (ETW)☆55Jul 8, 2022Updated 4 years ago
- Windows API sniffer and dumper utility for reverse engineering.☆13Jun 22, 2023Updated 3 years ago
- Final Transparent encrypted version☆14Jan 10, 2017Updated 9 years ago
- C++ library for low-level Windows development☆82Apr 12, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Kernel based monitor to check if specified process loads libraries only from allowed directories☆12May 21, 2020Updated 6 years ago
- RPC Monitor based on The ETW Microsoft-Windows-Rpc provider☆24Mar 22, 2020Updated 6 years ago
- Dump PDB Symbols including support for Bochs Debugging Format (with wine support)☆14Aug 11, 2023Updated 2 years ago
- Tiny driver patch to allow kernel callbacks to work on Win10 21h1☆34Feb 7, 2022Updated 4 years ago
- Events from all manifest-based and mof-based ETW providers across Windows 10 versions☆335May 2, 2024Updated 2 years ago
- Allows injecting .NET code into a remote process in Windows☆14Sep 11, 2019Updated 6 years ago
- A driver that hooks C: volume using symbolic link callback to track all FS access to the volume☆108Apr 24, 2020Updated 6 years ago
- ☆13Apr 30, 2020Updated 6 years ago
- Code from process of reversing Sysinternals Suite for educational purposes, with videos to associate them☆48Aug 23, 2023Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A repository that maps API calls to Sysmon Event ID's.☆122Nov 14, 2022Updated 3 years ago
- Easy Transparent Encrypted File System Based on Minifilter File System Driver☆36Feb 23, 2026Updated 5 months ago
- Shows different icons for 64 and 32-bit DLLs. Register with RegSvr32 to install☆38Dec 28, 2024Updated last year
- Event Tracing for Windows Custom Events☆21Jan 28, 2015Updated 11 years ago
- Collection of Windows kernel driver examples, offering insights into Windows internals, rootkit evasion, and advanced driver development.☆13Nov 23, 2023Updated 2 years ago
- Simple command line version of Sysinternals WinObj. Currently just lists object names and types given an object manager directory.☆23Sep 4, 2023Updated 2 years ago
- A POC for Windows Extension Host hooking☆24Jul 13, 2019Updated 7 years ago
- File system minifilter driver for Windows to block symbolic link attacks.☆53Dec 16, 2020Updated 5 years ago
- A simple example application to collect DNS queries logs using etw-api☆30May 11, 2020Updated 6 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Sysmon for Linux☆2,144Jul 13, 2026Updated 3 weeks ago
- ☆14Jul 22, 2024Updated 2 years ago
- Basic experimentation with Windows drivers.☆18Mar 3, 2023Updated 3 years ago
- A Practical example of ELAM (Early Launch Anti-Malware)☆36Nov 12, 2021Updated 4 years ago
- SysmonX - An Augmented Drop-In Replacement of Sysmon☆221Sep 17, 2019Updated 6 years ago
- 粗暴地枚举管理内核的WFP对象。 Manage kernel WFPs in a brutal way.☆24Jan 14, 2018Updated 8 years ago
- ASProtect reverse engineering & analysis WinDbg extension☆24Nov 16, 2020Updated 5 years ago