Alternatives and similar repositories for EopMon

Users that are interested in EopMon are comparing it to the libraries listed below

• tandasat / GuardMon

  View on GitHub
  Hypervisor based tool for monitoring system register accesses.
  ☆153Sep 13, 2018Updated 7 years ago
• tandasat / MemoryMon

  View on GitHub
  Detecting execution of kernel memory where is not backed by any image file
  ☆262Jul 11, 2018Updated 7 years ago
• tandasat / hyperplatform_log_parser

  View on GitHub
  User-mode program parsing logs created by HyperPlatform
  ☆18Aug 15, 2016Updated 9 years ago
• uniking / TDI-Demo

  View on GitHub
  ☆17Mar 3, 2016Updated 9 years ago
• tandasat / ListWorkItems

  View on GitHub
  Lists work items being queued currently.
  ☆14Jun 7, 2015Updated 10 years ago
• tandasat / cs_driver

  View on GitHub
  A sample project for using Capstone from a driver in Visual Studio 2015
  ☆36May 4, 2016Updated 9 years ago
• hcyang1012 / SecurityMonitor

  View on GitHub
  ☆12Feb 19, 2017Updated 8 years ago
• wanttobeno / IDAStealth-v1.3.3

  View on GitHub
  IDA反-反调试插件 IDAStealth v1.3.3, created 06/28/2011, Jan Newger
  ☆21Apr 4, 2018Updated 7 years ago
• AntiRootkit / BDArkit

  View on GitHub
  just an lite AntiRootkit for interesting
  ☆24Dec 9, 2015Updated 10 years ago
• michael4338 / TDI

  View on GitHub
  Windows Kernel Driver - Create a driver device in TDI layer of windows kernel to capture network data packets
  ☆36Jul 21, 2014Updated 11 years ago
• tandasat / findpg

  View on GitHub
  Windbg extension to find PatchGuard pages
  ☆123Jun 24, 2014Updated 11 years ago
• tandasat / FU_Hypervisor

  View on GitHub
  A hypervisor hiding user-mode memory using EPT
  ☆107Jan 28, 2018Updated 8 years ago
• tandasat / RemoteWriteMonitor

  View on GitHub
  A tool to help malware analysts tell that the sample is injecting code into other process.
  ☆78Aug 12, 2015Updated 10 years ago
• dotfornet / WindowsUtil

  View on GitHub
  ☆14Jan 10, 2017Updated 9 years ago
• zer0mem / VadScanner

  View on GitHub
  PoC of BOOST-ed _EPROCESS.VadRoot iterating
  ☆27May 21, 2014Updated 11 years ago
• mq1n / Wow64SyscallHook

  View on GitHub
  Wow64 syscall hook
  ☆42May 28, 2017Updated 8 years ago
• xjlzyi / gameplug

  View on GitHub
  pass game protect
  ☆12Apr 26, 2014Updated 11 years ago
• DeDf / HyperVisor

  View on GitHub
  ☆15Jan 14, 2016Updated 10 years ago
• EvilKnight1986 / Simrep

  View on GitHub
  windows kernel File redirection
  ☆20Sep 21, 2014Updated 11 years ago
• tandasat / DrvLoader

  View on GitHub
  A command line tool to load and unload a device driver.
  ☆46Jun 10, 2017Updated 8 years ago
• tandasat / DdiMon

  View on GitHub
  Monitoring and controlling kernel API calls with stealth hook using EPT
  ☆1,352Jan 22, 2022Updated 4 years ago
• IgorKorkin / HypervisorsDetection

  View on GitHub
  This is the first software system, which can detect a stealthy hypervisor and calculate several nested ones even under countermeasures.
  ☆87Jun 16, 2015Updated 10 years ago
• KelvinMsft / Perfvisor

  View on GitHub
  init
  ☆14Mar 16, 2020Updated 5 years ago
• sin5678 / wow64hook

  View on GitHub
  wow64 syscall filter
  ☆13Nov 12, 2014Updated 11 years ago
• tathanhdinh / SyscallTrace

  View on GitHub
  A system call tracer
  ☆10Sep 22, 2014Updated 11 years ago
• Zero-Tang / virtchk

  View on GitHub
  Confirms the capability of Hardware-Accelerated Virtualization Technology.
  ☆10Oct 26, 2025Updated 3 months ago
• in12hacker / VT_64_EPT

  View on GitHub
  createfile
  ☆50Oct 27, 2015Updated 10 years ago
• 0xdabbad00 / OpenHIPS

  View on GitHub
  OpenHIPS prevents exploitation of Windows systems
  ☆35Jan 7, 2013Updated 13 years ago
• Nukem9 / VirtualDbg

  View on GitHub
  Test code only. Not reliable for actual use.
  ☆63Jan 1, 2016Updated 10 years ago
• AlephNull314 / AbsoluteZero

  View on GitHub
  Anti-AV compilation
  ☆44Oct 4, 2013Updated 12 years ago
• Synestraa / Highcall-Library

  View on GitHub
  usermode standalone kernel interface
  ☆111Jul 9, 2018Updated 7 years ago
• changeofpace / Remote-Process-Cookie-for-Windows-7

  View on GitHub
  Obtain remote process cookies by performing a brute-force attack on ntdll.RtlDecodePointer using known pointer encodings.
  ☆22May 31, 2017Updated 8 years ago
• IgorKorkin / AllMemPro

  View on GitHub
  AllMemPro
  ☆46Jan 15, 2018Updated 8 years ago
• upring / virtdbg

  View on GitHub
  Automatically exported from code.google.com/p/virtdbg
  ☆99Jun 25, 2015Updated 10 years ago
• KelvinMsft / SyncJobs_MPSystem

  View on GitHub
  ☆14Aug 15, 2018Updated 7 years ago
• zareprj / JAV-AV-Engine

  View on GitHub
  An av windows engine with file guard and compress file enumator
  ☆12Aug 25, 2018Updated 7 years ago
• tandasat / PgResarch

  View on GitHub
  PatchGuard Research
  ☆304Oct 6, 2018Updated 7 years ago
• hrbust86 / HookMsrBySVM

  View on GitHub
  hook msr by amd svm
  ☆125Dec 30, 2019Updated 6 years ago
• tandasat / capstone

  View on GitHub
  Capstone disassembly/disassembler framework: Core (Arm, Arm64, M68K, Mips, PPC, Sparc, SystemZ, X86, X86_64, XCore) + bindings (Python, J…
  ☆15May 18, 2019Updated 6 years ago