Simple project that demonstrates how an ETW consumer can be created just by using NTDLL
☆156Feb 23, 2019Updated 7 years ago
Alternatives and similar repositories for EtwConsumerNT
Users that are interested in EtwConsumerNT are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- This is the P.O.C source for hooking the system calls on Windows 10 (1903) using it's dynamic trace feature weakness☆62Sep 12, 2019Updated 7 years ago
- A template programming library for Kernel Mode Windows drivers.☆13Jul 12, 2016Updated 10 years ago
- codes for my blog post: https://secrary.com/Random/InstrumentationCallback/☆180Nov 30, 2017Updated 8 years ago
- A driver that hooks C: volume using symbolic link callback to track all FS access to the volume☆108Apr 24, 2020Updated 6 years ago
- Trace events in real time sessions☆47Aug 25, 2023Updated 3 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- a simple intel vt code both support x86 & x64. PatchGuard monitor.☆76Oct 28, 2021Updated 5 years ago
- kernel-mode TDI client which can send and receive HTTP requests☆56Jun 9, 2018Updated 8 years ago
- c++ implementation of windows heavens gate☆69Feb 12, 2021Updated 5 years ago
- MemoryRanger protects kernel data and code by running drivers and hosting data in isolated kernel enclaves using VT-x and EPT features. M…☆249Aug 31, 2026Updated 2 months ago
- VT-based PCI device monitor (SPI)☆158Oct 29, 2020Updated 6 years ago
- Use ci.dll API for validating Authenticode signature of files☆171Mar 28, 2022Updated 4 years ago
- Windows Console Monitor☆35Jun 11, 2019Updated 7 years ago
- win10 pgContext dynamic dump (btc version)☆113Jan 15, 2020Updated 6 years ago
- Simple Demo of using Windows Hypervisor Platform☆29Jul 14, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Research on Windows Kernel Executive Callback Objects☆317Feb 22, 2020Updated 6 years ago
- Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999☆245Nov 6, 2019Updated 7 years ago
- C++ STL in the Windows Kernel with C++ Exception Support☆444Aug 16, 2023Updated 3 years ago
- Monitor ETW events for Windows process mitigation policies, with stack traces☆30Oct 7, 2022Updated 4 years ago
- Some garbage drivers written for getting started☆64Dec 31, 2019Updated 6 years ago
- Driver demonstrating how to register a DPC to asynchronously wait on an object☆50Jan 15, 2021Updated 5 years ago
- Events from all manifest-based and mof-based ETW providers across Windows 10 versions☆344Oct 12, 2026Updated 3 weeks ago
- Crash Windows 10 up to RS2 from an unprivileged process☆43Dec 10, 2017Updated 8 years ago
- PoC memory injection detection agent based on ETW, for offensive and defensive research purposes☆301Apr 10, 2021Updated 5 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Debugger extension for the Debugging Tools for Windows (WinDbg, KD, CDB, NTSD).☆69Nov 14, 2016Updated 9 years ago
- ☆35Oct 29, 2020Updated 6 years ago
- C++ Exceptions in Windows Drivers☆222Dec 21, 2020Updated 5 years ago
- KSOCKET provides a very basic example how to make a network connections in the Windows Driver by using WSK☆555Sep 2, 2022Updated 4 years ago
- pdbex is a utility for reconstructing structures and unions from the PDB into compilable C headers☆913Jun 18, 2025Updated last year
- ☆39Oct 29, 2020Updated 6 years ago
- This driver implements the Intel Processor Trace functionality in Intel Skylake architecture for Microsoft Windows☆486Apr 17, 2018Updated 8 years ago
- Detours with just single dependency - NTDLL☆686Nov 25, 2025Updated 11 months ago
- View ETW Provider manifest☆627Oct 17, 2026Updated 2 weeks ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Analyze PatchGuard☆56Aug 19, 2018Updated 8 years ago
- ☆178Sep 9, 2020Updated 6 years ago
- Collect different versions of Crucial modules.☆148Jul 11, 2024Updated 2 years ago
- The program draws with win32k gdi functions in the kernel while NtGdiDdDDISubmitCommand is being hooked.☆361Apr 27, 2020Updated 6 years ago
- A simple way to spoof return addresses using an exception handler☆43Aug 3, 2022Updated 4 years ago
- KrabsETW provides a modern C++ wrapper and a .NET wrapper around the low-level ETW trace consumption functions.☆812Updated this week
- Code Injection, Inject malicious payload via pagetables pml4.☆248Jul 7, 2021Updated 5 years ago