Alternatives and similar repositories for NtTrace

Users that are interested in NtTrace are comparing it to the libraries listed below

• serge1 / COFFI
  A header-only C++ library for accessing files in COFF binary format. (Including Windows PE/PE+ formats)
  ☆201Updated 2 months ago
• avakar / vcrtl
  C++ Exceptions in Windows Drivers
  ☆220Updated 4 years ago
• dishather / richprint
  Print compiler information stored in Rich Header of PE executables.
  ☆144Updated 2 weeks ago
• ergrelet / resym
  Cross-platform tool that allows browsing and extracting C and C++ type declarations from PDB files.
  ☆340Updated 9 months ago
• progmboy / openprocmon
  open source process monitor
  ☆294Updated 6 months ago
• 0vercl0k / udmp-parser
  A Cross-Platform C++ parser library for Windows user minidumps with Python 3 bindings.
  ☆220Updated last month
• 0vercl0k / kdmp-parser
  A Windows kernel dump C++ parser library with Python 3 bindings.
  ☆210Updated last month
• ladislav-zezula / FileTest
  Source code for File Test - Interactive File System Test Tool
  ☆300Updated 2 months ago
• JustasMasiulis / wow64pp
  A modern c++ implementation of windows heavens gate
  ☆237Updated 5 years ago
• polycone / pe-loader
  A Windows PE format file loader
  ☆148Updated 7 years ago
• moyix / pdbparse
  Python code to parse Microsoft PDB files
  ☆327Updated last year
• Fyyre / ntdll
  ntdll.h - compatible with MSVC 6.0, Intel C++ Compiler and MinGW. Serves as a complete replacement for Windows.h
  ☆147Updated 6 years ago
• rajkumar-rangaraj / PDB-Downloader
  PDB Downloader - An easier way to download Microsoft's public symbols for Libraries and Executables.
  ☆301Updated 9 years ago
• ykfre / BsodSurvivor
  This project aims to facilitate debugging a kernel driver in windows by adding support for a code change on the fly without reboot/unload…
  ☆171Updated 2 years ago
• yardenshafir / PoolViewer
  An application to view and filter pool allocations from a dmp file on Windows 10 RS5+.
  ☆145Updated 2 years ago
• zodiacon / ObjectExplorer
  Explore Kernel Objects on Windows
  ☆238Updated 7 months ago
• ntdiff / headers
  ☆174Updated last year
• ntdiff / ntdiff
  ☆131Updated last year
• markhc / windbg_to_c
  Translates WinDbg "dt" structure dump to a C structure
  ☆132Updated 9 years ago
• HoShiMin / formatPE
  A bunch of parsers for PE and PDB formats in C++
  ☆257Updated last year
• jxy-s / stlkrn
  C++ STL in the Windows Kernel with C++ Exception Support
  ☆433Updated 2 years ago
• airbus-cert / comida
  An IDA Plugin that help analyzing module that use COM
  ☆228Updated last month
• mandiant / STrace
  A DTrace on Windows Reimplementation
  ☆363Updated last month
• can1357 / linux-pe
  COFF and Portable Executable format described using standard C++ with no dependencies.
  ☆329Updated 6 months ago
• gdabah / distormx
  The ultimate hooking library
  ☆274Updated 4 years ago
• mrexodia / AppInitHook
  Global user-mode hooking framework, based on AppInit_DLLs. The goal is to allow you to rapidly develop hooks to inject in an arbitrary pr…
  ☆182Updated 3 years ago
• can1357 / HexSuite
  Header only wrapper around Hex-Rays API in C++20.
  ☆166Updated 10 months ago
• thinkcz / pico-toolbox
  PICO processes toolbox, playground for PICO processes research
  ☆74Updated 8 years ago
• gerhart01 / LiveCloudKd
  Hyper-V Research is trendy now
  ☆176Updated this week
• hugsy / windbg_js_scripts
  Toy scripts for playing with WinDbg JS API
  ☆242Updated last year