Alternatives and similar repositories for symdrive:

Users that are interested in symdrive are comparing it to the libraries listed below

• dongphuong2410 / hfm
  Hypervisor-base File Monitoring : monitoring file-related activities in VMs on XEN hypervisor
  ☆9Updated 7 years ago
• ntddk / decaf-platform
  DECAF Binary Analysis Platform
  ☆10Updated 9 years ago
• marche147 / smallTools
  simple tools
  ☆6Updated 7 years ago
• tpltnt / libemu
  libemu – x86 Shellcode Emulation
  ☆9Updated 8 years ago
• Tryan18 / XCOM
  Cross-referencing network communication for detecting Advanced Persistent Threat (APT) malware
  ☆6Updated 9 years ago
• wellbia / ntstruct
  Windows NT Internal Structure
  ☆5Updated 8 years ago
• 0xAcid / CuckooMon---Calling-address
  This repository is a clne of the new cuckoo monitor where I added some stuff to get the calling address for every hooked API
  ☆8Updated 8 years ago
• long123king / PE-Replay
  This is a pintool that can analyze target dynamically and output code blocks and "key frames".
  ☆15Updated 9 years ago
• S2E / libs2e
  libs2e.so
  ☆20Updated 4 years ago
• fonstest / FindOEPPin
  ☆7Updated 8 years ago
• sin5678 / wow64hook
  wow64 syscall filter
  ☆13Updated 10 years ago
• wirepair / SoNew
  Project for Injecting into Windows Processes
  ☆13Updated 12 years ago
• MartinDrab / Hackerfest2015
  Demos presented on Hackerfest 2015
  ☆14Updated 9 years ago
• tandasat / ListWorkItems
  Lists work items being queued currently.
  ☆13Updated 9 years ago
• ailton07 / PinVMShield
  PinVMShield: Dynamic Binary Instrumentation evasion/detection
  ☆10Updated 6 years ago
• angelkillah / OllyHandles
  ☆13Updated 9 years ago
• k33nteam / win32kescape
  ☆15Updated 9 years ago
• tandasat / CheckSDL
  A tool evaluates security configurations of a given PE based on SDL without source code
  ☆14Updated 10 years ago
• patois / idaplugins
  Old and probably outdated IDA plugins
  ☆24Updated 8 years ago
• tathanhdinh / SyscallTrace
  A system call tracer
  ☆10Updated 10 years ago
• netromdk / bmod
  bmod parses binaries for modification/patching and disassembles machine code sections.
  ☆12Updated 6 years ago
• ethobis / mfd
  파일시스템 미니필터 드라이버 (교육용 코드)
  ☆6Updated 6 years ago
• maxtruxa / WinHook
  Windows library for hooking functions across processes, injecting DLLs into other applications, and more. (Somewhat similar to MS Detours…
  ☆10Updated 11 years ago
• romangol / cryptoBoost
  Using boost to help implement cryptographic primitives in a clean style
  ☆10Updated 7 years ago
• bilka00 / peCloak
  ☆9Updated 7 years ago
• bilka00 / PayloadAdder
  PE32 binary + W32 payload
  ☆12Updated 7 years ago
• Prevenity / debug_monitor
  Monitorowanie API OutputDebugString()
  ☆9Updated 10 years ago
• sogeti-esec-lab / hbootdbg
  Debugger for HTC phones bootloader (HBOOT).
  ☆19Updated 11 years ago
• nihilus / WhatAPIs
  IDA WhatAPIs PlugIn
  ☆7Updated 9 years ago
• supervail / ForenVisor
  A lightweight hypervisor for forensics
  ☆11Updated 9 years ago