repnz / etw-providers-docsLinks
Document ETW providers
☆264Updated 5 years ago
Alternatives and similar repositories for etw-providers-docs
Users that are interested in etw-providers-docs are comparing it to the libraries listed below
Sorting:
- Events from all manifest-based and mof-based ETW providers across Windows 10 versions☆324Updated last year
- View ETW Provider manifest☆557Updated last year
- Sysmon-Like research tool for ETW☆378Updated 3 years ago
- KrabsETW provides a modern C++ wrapper and a .NET wrapper around the low-level ETW trace consumption functions.☆734Updated last week
- capemon: CAPE's monitor☆142Updated last week
- Some Code Samples for Windows based Inter-Process-Communication (IPC)☆203Updated last year
- A collection of free miscellaneous Windows tools☆139Updated 5 months ago
- Run Processes as PPL with ELAM☆173Updated 3 years ago
- RPC Monitor tool based on Event Tracing for Windows☆377Updated last year
- Source code for File Test - Interactive File System Test Tool☆300Updated 4 months ago
- Simple project that demonstrates how an ETW consumer can be created just by using NTDLL☆146Updated 6 years ago
- PoC memory injection detection agent based on ETW, for offensive and defensive research purposes☆294Updated 4 years ago
- Process Monitor X v2☆639Updated last year
- A DTrace on Windows Reimplementation☆366Updated 2 months ago
- An example of a client and server using Windows' ALPC functions to send and receive data.☆109Updated 11 months ago
- Useful scripts for WinDbg using the debugger data model☆426Updated last year
- Authenticode Hash Calculator for PE32/PE32+ files☆119Updated 5 months ago
- Event Tracing For Windows (ETW) Resources☆412Updated last month
- API Set Viewer☆90Updated 11 months ago
- Windows Filtering Platform Explorer☆307Updated 3 months ago
- Samples for the book Windows Kernel Programming, 2nd edition☆368Updated 4 months ago
- open source process monitor☆295Updated 7 months ago
- Extended Process Monitor-like tool based on Event Tracing for Windows☆471Updated 6 years ago
- Research on Windows Kernel Executive Callback Objects☆312Updated 5 years ago
- Hyper-V Research is trendy now☆190Updated last year
- This is a collection of interesting codes about Windows Process creation.☆238Updated last year
- Simple driver to register all available process, thread, image, Registry, and Object callbacks☆124Updated 8 years ago
- ETW Python Library☆293Updated 2 years ago
- ETWProcessMon2 is for Monitoring Process/Thread/Memory/Imageloads/TCPIP via ETW + Detection for Remote-Thread-Injection & Payload Detecti…☆318Updated last year
- APC Internals Research Code☆168Updated 5 years ago