Alternatives and similar repositories for wevt_template:

Users that are interested in wevt_template are comparing it to the libraries listed below

• EricZimmerman / SDB
  Parse Microsoft shim databases
  ☆30Updated 3 months ago
• m417z / minhook-detours
  A hooking library with a MinHook-like API and a Detours-like implementation, with support for the x86, x64, and ARM64 platforms
  ☆19Updated last week
• Fleex255 / CustomShim
  Example/starter code for custom Windows application compatibility shims
  ☆33Updated 4 years ago
• msuhanov / ntfs-samples
  NTFS samples
  ☆25Updated 4 years ago
• mr-tz / idapython
  IDAPython scripts
  ☆15Updated 7 years ago
• repnz / windows-imports-searcher
  Support Windows OS Reversing by searching easily for references to functions across many DLLs
  ☆34Updated 3 years ago
• airbus-cert / etwbreaker
  An IDA plugin to deal with Event Tracing for Windows (ETW)
  ☆54Updated 2 years ago
• stolenbytes / sxshashing
  ☆18Updated 7 years ago
• hasherezade / pin_n_sieve
  An experimental dynamic malware unpacker based on Intel Pin and PE-sieve
  ☆60Updated 8 months ago
• zodiacon / DeviceExplorer
  ☆46Updated 5 months ago
• Cisco-Talos / Windows-drivers-GDT-file
  Ghidra data type archive for Windows driver analysis
  ☆22Updated 6 months ago
• libyal / winevt-kb
  Windows Event Log Knowledge Base
  ☆24Updated 6 months ago
• AndreyBazhan / DbgPkg
  Scripts to prepare Windows system for debugging.
  ☆30Updated 4 years ago
• ydkhatri / macOS_FE
  Tools for macOS Forensic Bootable media
  ☆15Updated 4 years ago
• TimMisiak / windup
  WinDbg installer/updater
  ☆41Updated last year
• zodiacon / TaskSched
  ☆28Updated 2 years ago
• nccgroup / WindowsMemPageDelta
  A Microsoft Windows service to provide telemetry on Windows executable memory page changes to facilitate threat detection
  ☆31Updated 4 years ago
• OSWatcher / windows-desktop
  History and analysis of Windows desktop images
  ☆17Updated 4 years ago
• EricZimmerman / ExtensionBlocks
  Extension blocks as found in ShellBags and other places in the Registry
  ☆24Updated 3 months ago
• forensicmatt / RustyUsn
  USN to JSON
  ☆22Updated 5 years ago
• isciurus / windbgshark
  Automatically exported from code.google.com/p/windbgshark
  ☆11Updated 9 years ago
• zodiacon / InfStudio
  INF Studio for easier working with driver installation files
  ☆37Updated last year
• tyranid / DumpReparsePoints
  This is a simple tool to dump all the reparse points on an NTFS volume.
  ☆33Updated 4 years ago
• zodiacon / pstools-rust
  ☆12Updated 4 years ago
• epakskape / whpexp
  Experiments involving the Windows Hypervisor Platform
  ☆23Updated 4 years ago
• mandiant / win10_rekall
  Rekall Memory Forensic Framework
  ☆32Updated 5 years ago
• deroko / activationcontext
  ☆14Updated 7 years ago
• WinDbgScripts / PYKD
  This contains Helpful PYKD (Python Extension for Windbg) scripts
  ☆47Updated 10 years ago
• tyranid / WindowsRuntimeSecurityDemos
  Demos for Presentation on Windows Runtime Security
  ☆70Updated 6 years ago
• mandiant / win10_auto
  ☆24Updated 5 years ago