Alternatives and similar repositories for ApiSetView:

Users that are interested in ApiSetView are comparing it to the libraries listed below

• lowleveldesign / comon
  A WinDbg extension to trace COM interactions
  ☆111Updated last year
• zodiacon / syllabi
  ☆61Updated last year
• sgabe / SymlinkProtect
  File system minifilter driver for Windows to block symbolic link attacks.
  ☆51Updated 4 years ago
• pathtofile / PPLRunner
  Run Processes as PPL with ELAM
  ☆154Updated 2 years ago
• wbenny / EtwConsumerNT
  Simple project that demonstrates how an ETW consumer can be created just by using NTDLL
  ☆139Updated 6 years ago
• jdu2600 / Etw-SyscallMonitor
  Monitors ETW for security relevant syscalls maintaining the set called by each unique process
  ☆73Updated last year
• elastic / PPLGuard
  ☆68Updated last month
• zodiacon / winnativeapibooksamples
  Samples from my book Windows Native API programming
  ☆60Updated 2 weeks ago
• zodiacon / NativeApps
  Demos and presentation from SECArmy Village Grayhat 2020
  ☆36Updated last year
• zodiacon / DeviceExplorer
  ☆45Updated 3 months ago
• zodiacon / WinSys
  C++ library for low-level Windows development
  ☆72Updated 11 months ago
• zodiacon / sysrun
  Run any executable as SYSTEM account (no service required)
  ☆126Updated 10 months ago
• jonaslyk / temp
  ☆70Updated 2 years ago
• zodiacon / RemoteThreadDetection
  Remote Thread Detection with a Kernel Driver
  ☆28Updated last month
• LloydLabs / dearg-thread-ipc-stealth
  A novel technique to communicate between threads using the standard ETHREAD structure
  ☆110Updated 4 years ago
• pathtofile / SealighterTI
  Combining Sealighter with unpatched exploits to run the Threat-Intelligence ETW Provider
  ☆169Updated 2 years ago
• NtRaiseHardError / Sysmon
  Sysmon shenanigans
  ☆65Updated 4 years ago
• ionescu007 / hazmat5
  Local OXID Resolver (LCLOR) : Research and Tooling
  ☆34Updated 3 years ago
• trailofbits / WinDbg-JS
  ☆23Updated last year
• SouhailHammou / Drivers
  Windows Drivers
  ☆97Updated 5 years ago
• ch3rn0byl / WinDbg-Extensions
  ☆18Updated 4 years ago
• daem0nc0re / SharpWnfSuite
  C# Utilities for Windows Notification Facility
  ☆131Updated 3 months ago
• yardenshafir / CallbackObjectAnalyzer
  Dumps information about all the callback objects found in a dump file and the functions registered for them
  ☆35Updated 4 years ago
• nccgroup / DetectWindowsCopyOnWriteForAPI
  Enumerate various traits from Windows processes as an aid to threat hunting
  ☆186Updated 3 years ago
• xpn / RpcEnum
  An command-line RPC method enumerator, born out of RPCView's awesomeness
  ☆102Updated 5 years ago
• nccgroup / mimikatz-detector-condrv
  The Console Monitor Driver is a KMDF kernel-mode filter driver that captures certain Fast I/O operations (input and output) that is sent …
  ☆37Updated 2 years ago
• xenoscr / manual-syscall-detect
  A tool for detecting manual/direct syscalls in x86 and x64 processes using Nirvana Hooks.
  ☆108Updated 3 years ago
• DownWithUp / DynamicKernelShellcode
  An example of how x64 kernel shellcode can dynamically find and use APIs
  ☆104Updated 4 years ago
• VergiliusProject / kernels-data
  Windows kernel PDB data parsed into YAML
  ☆34Updated 4 months ago
• WithSecureLabs / ModuleStomping
  https://blog.f-secure.com/hiding-malicious-code-with-module-stomping/
  ☆118Updated 5 years ago