A tool to help malware analysts tell that the sample is injecting code into other process.
☆78Aug 12, 2015Updated 10 years ago
Alternatives and similar repositories for RemoteWriteMonitor
Users that are interested in RemoteWriteMonitor are comparing it to the libraries listed below
Sorting:
- windows kernel File redirection☆20Sep 21, 2014Updated 11 years ago
- A sample project for using Capstone from a driver in Visual Studio 2015☆36May 4, 2016Updated 9 years ago
- Notes my learning steps about Windows-NT☆23May 18, 2017Updated 8 years ago
- A command line tool to load and unload a device driver.☆46Jun 10, 2017Updated 8 years ago
- Wow64 syscall hook☆43May 28, 2017Updated 8 years ago
- Windows Kernel Driver - Create a driver device in TDI layer of windows kernel to capture network data packets☆36Jul 21, 2014Updated 11 years ago
- 内核级ARK工具。☆62Aug 1, 2016Updated 9 years ago
- Protect process fsfilter driver. Windows x64☆36Apr 11, 2016Updated 9 years ago
- Kernel mode driver loader, injecting into the windows kernel, Rootkit. Driver injections.☆48Nov 9, 2014Updated 11 years ago
- hypervisor in windows device driver by intel vt☆14Aug 25, 2018Updated 7 years ago
- ☆14Jan 10, 2017Updated 9 years ago
- profiling tool for analysising the games, get all the characteristic by hook d3d☆18Oct 10, 2014Updated 11 years ago
- ☆14Jun 27, 2017Updated 8 years ago
- ☆17Mar 3, 2016Updated 9 years ago
- ☆12Feb 19, 2017Updated 9 years ago
- An analytical debugger programmed in C++, using Qt.☆22May 20, 2012Updated 13 years ago
- wow64 syscall filter☆13Nov 12, 2014Updated 11 years ago
- Minifilter Driver☆15Feb 10, 2017Updated 9 years ago
- analyze the content of the pe file on windows, and shell(pack) function for windows drivers.☆11Nov 9, 2018Updated 7 years ago
- Windows Kernel Mode PCRE☆10Feb 4, 2015Updated 11 years ago
- Windows kernel-mode callbacks tutorial driver☆48Aug 8, 2016Updated 9 years ago
- Demo List cm/ps/ob/minifilter callback And Patch/Bypass it☆29Dec 5, 2017Updated 8 years ago
- ☆36Oct 29, 2020Updated 5 years ago
- Sandbox d'analyse de malware pour Windows 7 avec un client TCP en mode noyau☆19Feb 23, 2016Updated 10 years ago
- Helper utility for debugging windows PE/PE+ loader.☆52Mar 15, 2015Updated 10 years ago
- Windows anti-rootkit library☆37Mar 15, 2015Updated 10 years ago
- ☆13Aug 12, 2015Updated 10 years ago
- Enumerates very, very large directories quickly by directly using kernel syscalls. For POSIX and Windows. WARNING THIS IS OBSOLETE. USE B…☆15Aug 13, 2014Updated 11 years ago
- Program to monitor Windows event (keyboard, mouse event, processes, memory, cpu, ...)☆34Nov 10, 2014Updated 11 years ago
- DiskCryptor - it's a free solution that allows you to encrypt disk partitions, including system partition.☆17Dec 7, 2011Updated 14 years ago
- An aggregate of tools used in the core of vmp_dbg plus other parsing utils to parse vmp bc.☆16Oct 18, 2016Updated 9 years ago
- Block process execute kernel driver for Windows x64☆19Apr 7, 2016Updated 9 years ago
- pass game protect☆12Apr 26, 2014Updated 11 years ago
- Windows PE file debugger☆11Aug 30, 2017Updated 8 years ago
- Spoof Windows Test Signing Mode☆29Oct 13, 2018Updated 7 years ago
- Bypassing code hooks detection in modern anti-rootkits via building faked PTE entries.☆79Jan 24, 2011Updated 15 years ago
- Windows过滤驱动-helloworld☆24Aug 27, 2015Updated 10 years ago
- A library to install/uninstall NDIS driver on Windows☆15Jul 15, 2015Updated 10 years ago
- more at http://www.zer0mem.sk/?p=271☆12Jun 11, 2013Updated 12 years ago