The common parts of the Sysinternals Sysmon tool shared between the Windows and Linux versions.
☆64Jan 26, 2026Updated last month
Alternatives and similar repositories for SysmonCommon
Users that are interested in SysmonCommon are comparing it to the libraries listed below
Sorting:
- DTrace for Windows in userspace; Frontend to ETW☆27Oct 4, 2022Updated 3 years ago
- INF Studio for easier working with driver installation files☆39Nov 11, 2023Updated 2 years ago
- windows内核安全与驱动开发代码☆12Apr 4, 2020Updated 5 years ago
- The Linux port of the Sysinternals Sysmon tool.☆280Sep 22, 2025Updated 5 months ago
- An attempt at reversing WindowsDefender☆20Oct 6, 2024Updated last year
- MFT Fast Transcoder is a fast forensic tool to analyze MFT of NTFS partitions.☆12Feb 27, 2023Updated 3 years ago
- RPC Monitor based on The ETW Microsoft-Windows-Rpc provider☆24Mar 22, 2020Updated 5 years ago
- C++ library for low-level Windows development☆81Apr 12, 2024Updated last year
- Dump PDB Symbols including support for Bochs Debugging Format (with wine support)☆14Aug 11, 2023Updated 2 years ago
- Windows CIFS/SMB packet generation and SMB networking library☆12Aug 25, 2020Updated 5 years ago
- Show Window Stations, Desktops and top level windows☆17Jun 10, 2023Updated 2 years ago
- Windows API sniffer and dumper utility for reverse engineering.☆13Jun 22, 2023Updated 2 years ago
- git tags as Windows Projected Filesystem☆14Sep 2, 2023Updated 2 years ago
- Collection of Windows kernel driver examples, offering insights into Windows internals, rootkit evasion, and advanced driver development.☆12Nov 23, 2023Updated 2 years ago
- Tiny driver patch to allow kernel callbacks to work on Win10 21h1☆34Feb 7, 2022Updated 4 years ago
- An IDA plugin to deal with Event Tracing for Windows (ETW)☆55Jul 8, 2022Updated 3 years ago
- File system minifilter driver for Windows to block symbolic link attacks.☆51Dec 16, 2020Updated 5 years ago
- Kernel based monitor to check if specified process loads libraries only from allowed directories☆12May 21, 2020Updated 5 years ago
- ☆32Aug 3, 2022Updated 3 years ago
- Shows different icons for 64 and 32-bit DLLs. Register with RegSvr32 to install☆38Dec 28, 2024Updated last year
- 使用minifilter编写的透明加解密驱动。☆25Nov 10, 2017Updated 8 years ago
- Open-source EDR kernel-component for system monitoring and DLL injection☆33Nov 14, 2020Updated 5 years ago
- A wrapper for capstone for bearparser☆16Oct 8, 2025Updated 4 months ago
- Basic experimentation with Windows drivers.☆17Mar 3, 2023Updated 2 years ago
- A guide to get you started with Windows Kernel Debugging walking you through the complete setup and usage of WinDbg to trace Windows proc…☆25Nov 26, 2025Updated 3 months ago
- 对Windbg以Exdi模式下调试windows做一些修复☆21Aug 25, 2023Updated 2 years ago
- Packet Injection With WFP☆16Feb 20, 2023Updated 3 years ago
- Final Transparent encrypted version☆14Jan 10, 2017Updated 9 years ago
- Windows Sandbox Framework☆40Dec 31, 2021Updated 4 years ago
- Analyze Windows x64 Kernel Memory Layout☆129Nov 19, 2020Updated 5 years ago
- a loadable windows disk filter driver☆16Nov 24, 2012Updated 13 years ago
- ☆13Apr 30, 2020Updated 5 years ago
- Automatic .Net application updater.☆17Apr 22, 2018Updated 7 years ago
- azazel反编译器 ftrace函数追踪 elfdemon 代码注入 lpv,skeksi,saruman 病毒 quenya 重建进程☆19Aug 26, 2018Updated 7 years ago
- Events from all manifest-based and mof-based ETW providers across Windows 10 versions☆329May 2, 2024Updated last year
- Sysmon for Linux☆2,068Feb 10, 2026Updated 2 weeks ago
- SysmonX - An Augmented Drop-In Replacement of Sysmon☆216Sep 17, 2019Updated 6 years ago
- ☆12Sep 18, 2018Updated 7 years ago
- hy-rs, pronounced high rise, provides a unified and portable to the hypervisor APIs provided by various platforms.☆20Mar 10, 2022Updated 3 years ago