viorelyo / ProcmonelLinks
Procmonel is Procmon like monitoring system implemented using Microsoft WDK
☆12Updated 5 years ago
Alternatives and similar repositories for Procmonel
Users that are interested in Procmonel are comparing it to the libraries listed below
Sorting:
- ☆31Updated 4 years ago
- A driver to intercept low level windows events☆63Updated 5 years ago
- Trace events in real time sessions☆45Updated 2 years ago
- Static library and headers for linking your software with ntdll.dll☆34Updated 5 years ago
- ☆29Updated 4 years ago
- c++ implementation of windows heavens gate☆72Updated 4 years ago
- Data and structures regarding the research done on WdFilter☆12Updated 5 years ago
- DTrace for Windows in userspace; Frontend to ETW☆27Updated 2 years ago
- Static Library For Windows Drivers☆36Updated last week
- ☆40Updated 6 years ago
- ☆26Updated 7 years ago
- Protected Process Light Library☆18Updated 5 years ago
- Record & prevent file deletion in kernel mode☆44Updated 5 years ago
- File system minifilter driver for Windows to block symbolic link attacks.☆52Updated 4 years ago
- Simple library to handle PE files loading, relocating, get/set data, ..., in addition to process handling☆32Updated 6 years ago
- Lightweight Portable Executable parsing library and a demo peParser application.☆81Updated 2 years ago
- Simple command line version of Sysinternals WinObj. Currently just lists object names and types given an object manager directory.☆21Updated last year
- Example of real-time Windows ETW packet capture session☆53Updated 8 years ago
- Library for using direct system calls☆35Updated 7 months ago
- View handles and object for each object type☆64Updated 6 years ago
- Monitor ETW events for Windows process mitigation policies, with stack traces☆31Updated 2 years ago
- A POC for Windows Extension Host hooking☆24Updated 6 years ago
- ☆33Updated 4 years ago
- Infects PE files with a shellcode☆19Updated 6 years ago
- What makes it page☆17Updated 3 years ago
- Ready-to-use headers for Windows Kernel SSDT indices☆11Updated 5 years ago
- vmware-backdoor☆33Updated 4 years ago
- Load and unload a DLL into an remote process without using WriteProcessMemory ;)☆16Updated 11 years ago
- kernel-mode TDI client which can send and receive HTTP requests☆55Updated 7 years ago
- ☆24Updated 6 years ago