Alternatives and similar repositories for NtTrace

Users that are interested in NtTrace are comparing it to the libraries listed below

• progmboy / openprocmon
  open source process monitor
  ☆300Updated 8 months ago
• ergrelet / resym
  Cross-platform tool that allows browsing and extracting C and C++ type declarations from PDB files.
  ☆347Updated 11 months ago
• avakar / vcrtl
  C++ Exceptions in Windows Drivers
  ☆221Updated 5 years ago
• rajkumar-rangaraj / PDB-Downloader
  PDB Downloader - An easier way to download Microsoft's public symbols for Libraries and Executables.
  ☆302Updated 9 years ago
• ladislav-zezula / FileTest
  Source code for File Test - Interactive File System Test Tool
  ☆301Updated 4 months ago
• wbenny / DetoursNT
  Detours with just single dependency - NTDLL
  ☆661Updated last month
• dishather / richprint
  Print compiler information stored in Rich Header of PE executables.
  ☆145Updated 3 weeks ago
• zodiacon / ObjectExplorer
  Explore Kernel Objects on Windows
  ☆241Updated 9 months ago
• can1357 / linux-pe
  COFF and Portable Executable format described using standard C++ with no dependencies.
  ☆338Updated 8 months ago
• polycone / pe-loader
  A Windows PE format file loader
  ☆150Updated 7 years ago
• serge1 / COFFI
  A header-only C++ library for accessing files in COFF binary format. (Including Windows PE/PE+ formats)
  ☆208Updated 4 months ago
• jxy-s / stlkrn
  C++ STL in the Windows Kernel with C++ Exception Support
  ☆434Updated 2 years ago
• JustasMasiulis / wow64pp
  A modern c++ implementation of windows heavens gate
  ☆240Updated 5 years ago
• HoShiMin / formatPE
  A bunch of parsers for PE and PDB formats in C++
  ☆263Updated last year
• repnz / windbg-cheat-sheet
  My personal cheat sheet for using WinDbg for kernel debugging
  ☆446Updated 8 months ago
• ntdiff / headers
  ☆176Updated last year
• 0vercl0k / kdmp-parser
  A Windows kernel dump C++ parser library with Python 3 bindings.
  ☆213Updated 3 months ago
• 0vercl0k / udmp-parser
  A Cross-Platform C++ parser library for Windows user minidumps with Python 3 bindings.
  ☆224Updated 3 months ago
• anhkgg / awesome-windbg-extensions
  awesome windbg extensions
  ☆352Updated 6 years ago
• horsicq / xntsv
  XNTSV program for detailed viewing of system structures for Windows.
  ☆468Updated this week
• moyix / pdbparse
  Python code to parse Microsoft PDB files
  ☆331Updated last year
• mandiant / STrace
  A DTrace on Windows Reimplementation
  ☆368Updated 3 months ago
• MartinDrab / IRPMon
  The goal of the tool is to monitor requests received by selected device objects or kernel drivers. The tool is quite similar to IrpTracke…
  ☆405Updated last year
• SergiusTheBest / FindWDK
  CMake module for building drivers with Windows Development Kit (WDK)
  ☆322Updated 5 months ago
• ionescu007 / Simpleator
  Simpleator ("Simple-ator") is an innovative Windows-centric x64 user-mode application emulator that leverages several new features that w…
  ☆378Updated 7 years ago
• wbenny / pdbex
  pdbex is a utility for reconstructing structures and unions from the PDB into compilable C headers
  ☆884Updated 6 months ago
• airbus-cert / comida
  An IDA Plugin that help analyzing module that use COM
  ☆229Updated 3 months ago
• Fyyre / ntdll
  ntdll.h - compatible with MSVC 6.0, Intel C++ Compiler and MinGW. Serves as a complete replacement for Windows.h
  ☆149Updated 6 years ago
• MiroKaku / Musa.Veil
  Collection of undocumented Windows API declarations.
  ☆337Updated 3 months ago
• ntdiff / ntdiff
  ☆132Updated last year