zhihanyue / anti-ransomware-minifilterView external linksLinks
A minifilter driver for detecting and blocking ransomware virus
☆27Mar 4, 2018Updated 7 years ago
Alternatives and similar repositories for anti-ransomware-minifilter
Users that are interested in anti-ransomware-minifilter are comparing it to the libraries listed below
Sorting:
- Anti-ransomware in linux, Decoy, Protect file, Protect drectory, Auto backup☆25Feb 12, 2023Updated 3 years ago
- 基于行为的Ransomware检测原型☆40Oct 29, 2017Updated 8 years ago
- Final Transparent encrypted version☆14Jan 10, 2017Updated 9 years ago
- Listens for Firewall rule match events generated by Microsoft Hyper-V Virtual Filter Protocol (VFP) extension.☆31Jan 26, 2021Updated 5 years ago
- An minifilter-based transparent encryptor☆43May 21, 2014Updated 11 years ago
- Technion CS Ransomware Project: Writing Windows Mini-Filter Driver to protect PC from Ransomware☆37Feb 11, 2021Updated 5 years ago
- A simple ransomware defender.It uses minifilter to filt "rewrite" and "delete" events in kernel.And it handles event in user mode.☆27Aug 14, 2018Updated 7 years ago
- The windows kernel ssdt hook demo☆16Nov 5, 2018Updated 7 years ago
- Sysark全称system anti-rootkit，是我学习内核写的工具（2013年的代码，后续不会再更新），里面基本上所有的功能都是用内核实现的。这里只是实现了反rootkit部分功能，作为工具的话，本人觉得还欠完善，但作为学习，或有人需要。目前针对的是XP SP2，…☆27Dec 26, 2017Updated 8 years ago
- Windows device tree walker☆15Sep 19, 2018Updated 7 years ago
- PoC code for CVE-2018-15499 (exploit race condition for BSoD)☆11Aug 23, 2018Updated 7 years ago
- Confirms the capability of Hardware-Accelerated Virtualization Technology.☆10Oct 26, 2025Updated 3 months ago
- An minifilter-based transparent encryptor on Windows.☆30Feb 27, 2017Updated 8 years ago
- 基于WinDivert实现的一个包过滤与截断程序☆13Jul 22, 2018Updated 7 years ago
- ☆12Oct 19, 2017Updated 8 years ago
- ☆30Nov 8, 2017Updated 8 years ago
- Hook IDT vector 0xb2 to detect SCI in 64bit windows.☆34Aug 27, 2022Updated 3 years ago
- ☆14Feb 14, 2018Updated 8 years ago
- ☆12Feb 19, 2017Updated 8 years ago
- What makes it page☆17Aug 24, 2022Updated 3 years ago
- Automatically exported from code.google.com/p/hf-2011☆15Feb 12, 2016Updated 10 years ago
- antfs - kernel mode driver based on NTFS-3G☆15Feb 3, 2021Updated 5 years ago
- ☆29Jan 15, 2021Updated 5 years ago
- ☆34Jul 28, 2018Updated 7 years ago
- ☆26May 31, 2019Updated 6 years ago
- Easy Transparent Encrypted File System Based on Minifilter File System Driver☆35Sep 30, 2025Updated 4 months ago
- Minifilter Driver☆15Feb 10, 2017Updated 9 years ago
- My manual analysis of malware families☆13Jul 12, 2017Updated 8 years ago
- 给windows窗口全局添加一些功能。☆21May 1, 2019Updated 6 years ago
- File encryption based on DES and blowfish☆15May 29, 2025Updated 8 months ago
- User-mode program parsing logs created by HyperPlatform☆18Aug 15, 2016Updated 9 years ago
- Kernel-mode file scanner☆19Jul 16, 2018Updated 7 years ago
- Windows log and threat hunting with powershell☆16Dec 11, 2020Updated 5 years ago
- Automatically exported from code.google.com/p/bypass-x64-dse☆20Oct 1, 2015Updated 10 years ago
- Some python scripts are used to export userdata from huge idb(ida's database)，ida 7.0 support only☆21Oct 18, 2018Updated 7 years ago
- Windows file system minifilter driver which generates backup copies of certain files before they change☆47Oct 13, 2018Updated 7 years ago
- This is a demo project to illustrate the way to verify and restore original SST in case of some malware hooks☆33Mar 2, 2017Updated 8 years ago
- Ransomware detection application for Windows using Windows Minifilter driver☆93Jun 6, 2020Updated 5 years ago
- win7 apc注入不支持win10☆18Mar 29, 2019Updated 6 years ago