repnz / etw-providers-docs
Document ETW providers
☆206Updated 4 years ago
Related projects ⓘ
Alternatives and complementary repositories for etw-providers-docs
- Events from all manifest-based and mof-based ETW providers across Windows 10 versions☆268Updated 6 months ago
- View ETW Provider manifest☆432Updated 2 weeks ago
- KrabsETW provides a modern C++ wrapper and a .NET wrapper around the low-level ETW trace consumption functions.☆610Updated last week
- Sysmon-Like research tool for ETW☆336Updated 2 years ago
- A collection of free miscellaneous Windows tools☆123Updated 2 months ago
- Some Code Samples for Windows based Inter-Process-Communication (IPC)☆160Updated 8 months ago
- Windows Filtering Platform Explorer☆211Updated last month
- Source code for File Test - Interactive File System Test Tool☆260Updated last week
- Simple project that demonstrates how an ETW consumer can be created just by using NTDLL☆135Updated 5 years ago
- Process Monitor X v2☆589Updated 9 months ago
- This program can retrieve signature information from PE files which signed by one or more certificates on Windows. Supporting multi-signe…☆98Updated 2 years ago
- PoC memory injection detection agent based on ETW, for offensive and defensive research purposes☆253Updated 3 years ago
- RPC Monitor tool based on Event Tracing for Windows☆330Updated 3 months ago
- An example of a client and server using Windows' ALPC functions to send and receive data.☆89Updated 4 years ago
- Authenticode Hash Calculator for PE32/PE32+ files☆107Updated 8 months ago
- Event Tracing For Windows (ETW) Resources☆349Updated last month
- A command tree based on commands and extensions for Windows Kernel Debugging.☆105Updated 4 years ago
- Run Processes as PPL with ELAM☆146Updated 2 years ago
- ☆151Updated last month
- ☆171Updated 4 years ago
- Log ALPC activity☆80Updated last year
- Extended Process Monitor-like tool based on Event Tracing for Windows☆463Updated 4 years ago
- Named pipe I/O ETW provider for Windows☆67Updated 4 years ago
- This is a repo for small, useful scripts and extensions☆240Updated last year
- Samples for the book Windows Kernel Programming, 2nd edition☆293Updated 3 months ago
- open source process monitor☆254Updated 11 months ago
- APC Internals Research Code☆158Updated 4 years ago
- PE Viewer☆152Updated 3 weeks ago
- Hyper-V Research is trendy now☆172Updated 6 months ago
- This is a collection of interesting codes about Windows Process creation.☆230Updated 10 months ago