pagiux / IRPLogger
A minifilter driver to capture processes behavior from a filesystem prospective.
☆12Updated last month
Related projects ⓘ
Alternatives and complementary repositories for IRPLogger
- Ransomware detection application for Windows using Windows Minifilter driver☆78Updated 4 years ago
- Robust API monitoring system presented in the paper "Designing Robust API Monitoring Solutions" (IEEE TDSC)☆23Updated 2 years ago
- A minifilter driver for detecting and blocking ransomware virus☆24Updated 6 years ago
- Technion CS Ransomware Project: Writing Windows Mini-Filter Driver to protect PC from Ransomware☆35Updated 3 years ago
- AVCLASS++: Yet Another Massive Malware Labeling Tool☆14Updated 4 years ago
- ☆29Updated 3 years ago
- Simple AntiVirus Driver example☆37Updated 6 years ago
- Static Library For Windows Drivers☆30Updated this week
- Windows file system minifilter driver which generates backup copies of certain files before they change☆46Updated 6 years ago
- RanSAP: An Open Dataset of Ransomware Storage Access Patterns for Training Machine Learning Models☆26Updated 3 months ago
- Defense from the 2020 Microsoft Evasion Competition☆16Updated 3 years ago
- Windows disk filter driver to demonstrate sector write redirection☆38Updated 10 years ago
- ☆28Updated 7 years ago
- Procmonel is Procmon like monitoring system implemented using Microsoft WDK☆11Updated 4 years ago
- IntroVirt is an guest introspection library for KVM☆53Updated 2 months ago
- Code-Reuse Exploits detection using Intel Processor Trace☆27Updated 6 years ago
- Example WDF/KMDF driver and test app demonstrating the "inverted call model"☆32Updated 4 years ago
- A driver to intercept low level windows events☆60Updated 5 years ago
- Various WinDbg extensions and scripts☆31Updated 6 years ago
- Disable any USB Mass Storage device from kmode using a pnp filter driver☆60Updated 3 years ago
- This repo is created to perform I/O Request Packet (IRP) driven ransomware analysis where the IRP logs were collected during ransomware e…☆11Updated 4 years ago
- This repository contains D-TIME: Distributed Threadless Independent Malware Execution for Runtime Obfuscation.☆35Updated 3 years ago
- 基于MiniFilter和Sfilter的加解密☆21Updated 5 years ago
- Data and structures regarding the research done on WdFilter☆13Updated 4 years ago
- a loadable windows disk filter driver☆14Updated 11 years ago
- Public datasets of malware and benign executable files (Windows EXE files). The dataset can be used by cybersecurity researchers focusing…☆21Updated last year
- What makes it page☆17Updated 2 years ago
- 使用minifilter编写的透明加解密驱动。☆24Updated 7 years ago