repnz / etw-providers-docsLinks
Document ETW providers
☆246Updated 5 years ago
Alternatives and similar repositories for etw-providers-docs
Users that are interested in etw-providers-docs are comparing it to the libraries listed below
Sorting:
- Events from all manifest-based and mof-based ETW providers across Windows 10 versions☆308Updated last year
- View ETW Provider manifest☆526Updated 9 months ago
- Sysmon-Like research tool for ETW☆359Updated 2 years ago
- KrabsETW provides a modern C++ wrapper and a .NET wrapper around the low-level ETW trace consumption functions.☆693Updated 5 months ago
- Some Code Samples for Windows based Inter-Process-Communication (IPC)☆195Updated last year
- A collection of free miscellaneous Windows tools☆137Updated last month
- Simple project that demonstrates how an ETW consumer can be created just by using NTDLL☆144Updated 6 years ago
- capemon: CAPE's monitor☆125Updated last week
- Source code for File Test - Interactive File System Test Tool☆293Updated last week
- Run Processes as PPL with ELAM☆167Updated 3 years ago
- RPC Monitor tool based on Event Tracing for Windows☆369Updated last year
- An example of a client and server using Windows' ALPC functions to send and receive data.☆101Updated 7 months ago
- Process Monitor X v2☆629Updated last year
- Authenticode Hash Calculator for PE32/PE32+ files☆113Updated last month
- PoC memory injection detection agent based on ETW, for offensive and defensive research purposes☆285Updated 4 years ago
- Simple driver to register all available process, thread, image, Registry, and Object callbacks☆123Updated 7 years ago
- Useful scripts for WinDbg using the debugger data model☆419Updated last year
- ETW Python Library☆288Updated 2 years ago
- This is a collection of interesting codes about Windows Process creation.☆239Updated last year
- ☆170Updated 10 months ago
- Research on Windows Kernel Executive Callback Objects☆306Updated 5 years ago
- The goal of the tool is to monitor requests received by selected device objects or kernel drivers. The tool is quite similar to IrpTracke…☆391Updated 7 months ago
- API Set Viewer☆92Updated 7 months ago
- ☆171Updated 4 years ago
- This program can retrieve signature information from PE files which signed by one or more certificates on Windows. Supporting multi-signe…☆101Updated 2 years ago
- Windows Filtering Platform Explorer☆286Updated 6 months ago
- Log ALPC activity☆84Updated last year
- Event Tracing For Windows (ETW) Resources☆395Updated 10 months ago
- ☆300Updated 4 years ago
- APC Internals Research Code☆166Updated 5 years ago