Alternatives and similar repositories for Dtrace-ETW

Users that are interested in Dtrace-ETW are comparing it to the libraries listed below

• waleedassar / ALPC_CLIENT_SERVER

  View on GitHub
  Demo to show how write ALPC Client & Server using native Ntdll.dll syscalls.
  ☆21Jan 25, 2022Updated 4 years ago
• kouzhudong / libdrv

  View on GitHub
  Static Library For Windows Drivers
  ☆41Dec 13, 2025Updated 2 months ago
• russellklenk / ETW

  View on GitHub
  Event Tracing for Windows Custom Events
  ☆21Jan 28, 2015Updated 11 years ago
• microsoft / SysmonCommon

  View on GitHub
  The common parts of the Sysinternals Sysmon tool shared between the Windows and Linux versions.
  ☆65Jan 26, 2026Updated 2 weeks ago
• yottaawesome / basic-windows-drivers

  View on GitHub
  Basic experimentation with Windows drivers.
  ☆17Mar 3, 2023Updated 2 years ago
• nbqofficial / asm-lib

  View on GitHub
  Libraries written in inline assembly
  ☆19Aug 7, 2023Updated 2 years ago
• gabriellandau / CISpotter

  View on GitHub
  Code Integrity Violation Spotter
  ☆17Jun 11, 2024Updated last year
• wanttobeno / 360SceenCapture

  View on GitHub
  360官方出品的截图软件，套个马甲可以单独使用
  ☆16Apr 4, 2019Updated 6 years ago
• mattpodwysocki / ETW-Trace

  View on GitHub
  ETW Tracing C++ project
  ☆16Oct 2, 2020Updated 5 years ago
• KelvinMsft / TechMyths

  View on GitHub
  ☆18Mar 28, 2023Updated 2 years ago
• zodiacon / DeviceExplorer

  View on GitHub
  ☆58Dec 8, 2025Updated 2 months ago
• alfarom256 / MinifilterResearch

  View on GitHub
  ☆16Oct 31, 2022Updated 3 years ago
• Donpedro13 / etwprof

  View on GitHub
  Sampling profiler for native applications on Windows, based on ETW
  ☆75Jul 25, 2025Updated 6 months ago
• bb107 / ServiceCall

  View on GitHub
  Interprocess communication library, providing the ability to call functions from each other
  ☆20Oct 3, 2019Updated 6 years ago
• pwnslinger / USBlocker

  View on GitHub
  Disable any USB Mass Storage device from kmode using a pnp filter driver
  ☆65Jan 24, 2021Updated 5 years ago
• h0li3 / mpengine_diskus

  View on GitHub
  参考taviso的代码逆向一下mpengine.dll
  ☆20Jun 30, 2022Updated 3 years ago
• gigabitwize / dank

  View on GitHub
  Driver Loader/BE Bypass/Win Malware(lol)
  ☆36Jun 25, 2019Updated 6 years ago
• 0xhido / BlueLight

  View on GitHub
  Open-source EDR kernel-component for system monitoring and DLL injection
  ☆33Nov 14, 2020Updated 5 years ago
• sgabe / SymlinkProtect

  View on GitHub
  File system minifilter driver for Windows to block symbolic link attacks.
  ☆52Dec 16, 2020Updated 5 years ago
• Souhardya / Slavyana

  View on GitHub
  Windows Sandbox Framework
  ☆40Dec 31, 2021Updated 4 years ago
• packetzero / etwrealtime

  View on GitHub
  Example of real-time Windows ETW packet capture session
  ☆54Jul 12, 2017Updated 8 years ago
• omerk2511 / NotifyRoutinesResearch

  View on GitHub
  A research project about Windows notify routines.
  ☆38Jul 31, 2020Updated 5 years ago
• chkpizza / runtime

  View on GitHub
  VEH Redirect & VEH Debugger
  ☆23May 18, 2020Updated 5 years ago
• asgarciap / etw-dns

  View on GitHub
  A simple example application to collect DNS queries logs using etw-api
  ☆26May 11, 2020Updated 5 years ago
• alal4465 / KernelMon

  View on GitHub
  A ProcMon-esque tool for monitoring Windows Kernel Drivers
  ☆62May 31, 2021Updated 4 years ago
• makitos666 / MFT_Fast_Transcoder

  View on GitHub
  MFT Fast Transcoder is a fast forensic tool to analyze MFT of NTFS partitions.
  ☆12Feb 27, 2023Updated 2 years ago
• repnz / rpcmon

  View on GitHub
  RPC Monitor based on The ETW Microsoft-Windows-Rpc provider
  ☆24Mar 22, 2020Updated 5 years ago
• rich-ayr / phnt_nightly

  View on GitHub
  Native API header files for the Process Hacker project (nightly).
  ☆26Sep 28, 2025Updated 4 months ago
• zodiacon / BITSManager

  View on GitHub
  BITS Transfers Manager
  ☆45May 18, 2025Updated 8 months ago
• gmh5225 / Driver-SoulExtraction

  View on GitHub
  SoulExtraction is a windows driver library for extracting cert information in windows drivers
  ☆25Feb 12, 2023Updated 3 years ago
• therealdreg / pdbdump_bochs

  View on GitHub
  Dump PDB Symbols including support for Bochs Debugging Format (with wine support)
  ☆14Aug 11, 2023Updated 2 years ago
• stevietrouble / haxrs

  View on GitHub
  Cheat Engine alternative written in Rust
  ☆12Nov 15, 2022Updated 3 years ago
• orca-eaa5a / mac-defender

  View on GitHub
  ☆11Jan 8, 2022Updated 4 years ago
• mel2oo / Driver-for-windows

  View on GitHub
  ☆17Jun 30, 2020Updated 5 years ago
• Chener-03 / AntiHook

  View on GitHub
  扫描以及恢复 r3hook 类
  ☆10Aug 29, 2021Updated 4 years ago
• ganboing / shim_test

  View on GitHub
  ☆15Mar 28, 2015Updated 10 years ago
• nefarius / WinApiSniffer

  View on GitHub
  Windows API sniffer and dumper utility for reverse engineering.
  ☆13Jun 22, 2023Updated 2 years ago
• minglinchen / Win-Drv

  View on GitHub
  windows内核安全与驱动开发代码
  ☆12Apr 4, 2020Updated 5 years ago
• microsoft / libdxgtest

  View on GitHub
  Sample usage of the libdxg projects.
  ☆14Jan 29, 2026Updated 2 weeks ago