Alternatives and similar repositories for windows-nt-file-system-internals-book

Users that are interested in windows-nt-file-system-internals-book are comparing it to the libraries listed below

• omerk2511 / NotifyRoutinesResearch
  A research project about Windows notify routines.
  ☆37Updated 5 years ago
• ioncodes / rw
  allowing um r/w through km from um ioctl ™
  ☆11Updated 3 years ago
• alfarom256 / MinifilterResearch
  ☆16Updated 2 years ago
• gabriellandau / CISpotter
  Code Integrity Violation Spotter
  ☆17Updated last year
• OSRDrivers / WDF-I
  Writing WDF Drivers I: Core Concepts Lab Material
  ☆53Updated 2 years ago
• hfiref0x / Misc
  Miscellaneous Code and Docs
  ☆82Updated last month
• hasherezade / pe_utils
  A set of small utilities, helpers for PIN tracers
  ☆32Updated last year
• gmh5225 / Driver-SoulExtraction
  SoulExtraction is a windows driver library for extracting cert information in windows drivers
  ☆24Updated 2 years ago
• hasherezade / pin_n_sieve
  An experimental dynamic malware unpacker based on Intel Pin and PE-sieve
  ☆61Updated last year
• therealdreg / symseghelper
  Helper scripts for windows debugging with symbols for Bochs and IDA Pro (PDB files). Very handy for user mode <--> kernel mode
  ☆19Updated 2 years ago
• therealdreg / windbgtocstruct
  Helper Script to convert a Windbg dumped structure (using the 'dt' command) into a C structure. It creates dummy structs for you if neede…
  ☆27Updated 2 years ago
• Fyyre / directntapi
  DirectNtApi - simple method to make ntapi function call without importing or walking export table. Work under Windows 7, 8 and 10
  ☆53Updated last year
• Air14 / SmmLoader
  Runtime smm module loader
  ☆35Updated 2 years ago
• repnz / windows-imports-searcher
  Support Windows OS Reversing by searching easily for references to functions across many DLLs
  ☆34Updated 3 years ago
• thalium / WinDbgFastObj
  ☆21Updated 4 years ago
• hasherezade / libpeconv_tpl
  A ready-made template for a project based on libpeconv.
  ☆47Updated 6 months ago
• 0vercl0k / KEPaboo
  Neutralize KEPServerEX anti-debugging techniques
  ☆32Updated 2 years ago
• 474172261 / windows-CET
  ☆13Updated 2 years ago
• mtth-bfft / win32k-mitigation
  A test project to try the new win32k.sys system call filtering mitigation in Windows 10
  ☆15Updated 6 years ago
• yardenshafir / conference_talks
  Slides from various conference talks
  ☆37Updated 2 years ago
• yardenshafir / cet-research
  A collection of tools, source code, and papers researching Windows' implementation of CET.
  ☆85Updated 4 years ago
• 0xMegaByte / COM-Explained
  ☆26Updated 2 years ago
• Lima-X / XOrCryptEx
  XOrCryptEx lightweight C Utility/Algorithm
  ☆12Updated 3 years ago
• ioncodes / pooldump
  ☆29Updated 3 years ago
• vitoplantamura / BugChecker2002
  SoftICE-like debugger for Windows 2000 and XP. Archived.
  ☆19Updated 2 years ago
• un4ckn0wl3z / PCIE-Detector
  Sample/PoC Windows kernel driver for detect DMA devices by using Vendor ID and Device ID signatures
  ☆35Updated 11 months ago
• kukrimate / grr
  AMD SVM hypervisor rootkit proof of concept
  ☆48Updated last year
• DownWithUp / WarbirdExamples
  An example of how to use Microsoft Windows Warbird technology
  ☆28Updated 2 years ago
• shareef12 / driveranalyzer
  Binary Ninja plugin to perform automated analysis of Windows drivers
  ☆17Updated 6 years ago
• AdiMarianMutu / PE-File-Infection
  Infects PE files with a shellcode
  ☆19Updated 6 years ago