pagiux / IRPLoggerLinks
A minifilter driver to capture processes behavior from a filesystem prospective.
☆14Updated 8 months ago
Alternatives and similar repositories for IRPLogger
Users that are interested in IRPLogger are comparing it to the libraries listed below
Sorting:
- Ransomware detection application for Windows using Windows Minifilter driver☆86Updated 5 years ago
- Ransomware dataset, containing dynamic behaviour of more than 60 distinct ransomware families.☆11Updated 2 years ago
- ☆14Updated 5 years ago
- A new idea to build an anti ransomware☆23Updated 4 years ago
- ☆15Updated 5 years ago
- Research tool able to detect and mitigate evasion techniques used by malware in-the-wild☆11Updated 2 years ago
- Malware Classification and Labelling using Deep Neural Networks☆36Updated 5 years ago
- Public datasets of malware and benign executable files (Windows EXE files). The dataset can be used by cybersecurity researchers focusing…☆23Updated last year
- Robust API monitoring system presented in the paper "Designing Robust API Monitoring Solutions" (IEEE TDSC)☆24Updated 3 years ago
- Malware datasets tagged by behavior, platform, vulnerability, and packer☆25Updated last year
- Dataset of packed PE samples☆34Updated 10 months ago
- A minifilter driver preserves all modified and deleted files.☆81Updated 9 years ago
- Automated Integration of anti-Reversing methods in PE executables☆51Updated 6 years ago
- RanSAP: An Open Dataset of Ransomware Storage Access Patterns for Training Machine Learning Models☆27Updated 9 months ago
- File system minifilter driver for Windows to block symbolic link attacks.☆51Updated 4 years ago
- capemon: CAPE's monitor☆118Updated 2 weeks ago
- Ransomware Dataset for arXiv:1609.03020☆25Updated 3 years ago
- Technion CS Ransomware Project: Writing Windows Mini-Filter Driver to protect PC from Ransomware☆36Updated 4 years ago
- Native Python3 bindings for @horsicq's Detect-It-Easy☆68Updated 3 weeks ago
- ☆19Updated last month
- This repository contains D-TIME: Distributed Threadless Independent Malware Execution for Runtime Obfuscation.☆35Updated 4 years ago
- A minifilter driver for detecting and blocking ransomware virus☆26Updated 7 years ago
- Simple windows API logger☆104Updated 5 years ago
- 🔍 "2015 Microsoft Malware Classification Challenge" - Using machine learning to classify malware into different families based on Window…☆26Updated last year
- Defense from the 2020 Microsoft Evasion Competition☆16Updated 4 years ago
- A Deep Learning ensemble that classifies Windows executable files as either benign, ransomware, or other malware.☆27Updated 5 years ago
- IntroVirt is an guest introspection library for KVM☆54Updated 9 months ago
- ☆31Updated 4 years ago
- Simple project that demonstrates how an ETW consumer can be created just by using NTDLL☆143Updated 6 years ago
- Example of real-time Windows ETW packet capture session☆53Updated 7 years ago