Alternatives and similar repositories for RemoteThreadDetection:

Users that are interested in RemoteThreadDetection are comparing it to the libraries listed below

• zodiacon / VerifierDLL
  Example of building an application verifer DLL
  ☆44Updated 8 months ago
• zodiacon / WinEventHooks
  SetWinEventHook Sample
  ☆46Updated last year
• zodiacon / MalDevWorkshopWebinar
  Demo from the Malware Analysis and Development Webinar
  ☆19Updated 10 months ago
• gabriellandau / ShadowStackWalk
  Finding Truth in the Shadows
  ☆88Updated 2 years ago
• je5442804 / CreateProcessInternalW-Full
  Reimplement CreateProcessInternalW via Windows 10 20H1+/Windows 11 Base on NtCreateUserProcess-Post
  ☆54Updated 5 months ago
• 0mWindyBug / MinifilterHook
  silence file system monitoring components by hooking their minifilters
  ☆54Updated last year
• 0xMegaByte / COM-Explained
  ☆25Updated 2 years ago
• whokilleddb / ETWListicle
  List the ETW provider(s) in the registration table of a process.
  ☆56Updated last year
• zodiacon / youtubecode
  Youtube channel sample code
  ☆40Updated last month
• zodiacon / winnativeapibooksamples
  Samples from my book Windows Native API programming
  ☆59Updated 7 months ago
• rbmm / LdrpKernel32DllName
  ☆82Updated 8 months ago
• zodiacon / NativePowers
  Native Powers Talk demos
  ☆14Updated last year
• ommadawn46 / HEVD-Exploit-Win10-22H2-KVAS
  HEVD Exploit: ArbitraryWrite on Windows 10 22H2 - Bypassing KVA Shadow and SMEP via PML4 Entry Manipulation
  ☆22Updated 7 months ago
• C5Hackr / c_syscalls
  https://github.com/janoglezcampos/c_syscalls with the ASM rewritten by myself for Visual Studio's Compiler.
  ☆30Updated 7 months ago
• worawit / malk
  Demonstrate calling a kernel function and handle process creation callback against HVCI
  ☆52Updated 2 years ago
• zodiacon / Minimal
  ☆16Updated last year
• rbmm / TPM
  Easy encrypt/decrypt data with TPM
  ☆25Updated 11 months ago
• AlSch092 / ModifyExports
  Research of modifying exported function names at runtime (C/C++, Windows)
  ☆17Updated 8 months ago
• zodiacon / KObjects
  Sample for Creating a new kernel object type and supporting API
  ☆23Updated 5 months ago
• Cracked5pider / unguard-eat
  havoc kaine plugin to mitigate PAGE_GUARD protected image headers using JOP gadgets
  ☆26Updated 6 months ago
• maziland / StackBombing
  Next gen process injection technique
  ☆44Updated 4 years ago
• rbmm / NtDetours
  Detours implementation (x64/x86) which used only ntdll import
  ☆90Updated 8 months ago
• rbmm / RtlClone
  ☆36Updated this week
• li4321 / selfmovingdll
  ☆19Updated 2 months ago
• m417z / LdrDllNotificationHook
  Hook all callbacks which are registered with LdrRegisterDllNotification
  ☆84Updated 2 years ago
• oldboy21 / SWAPPALA
  In-memory hiding technique
  ☆45Updated last month
• jsecurity101 / MSFT_DriverBlockList
  Repository of Microsoft Driver Block Lists based off of OS-builds
  ☆39Updated 10 months ago
• Idov31 / UdpInspector
  Listing UDP connections with remote address without sniffing.
  ☆30Updated last year
• x64dbg / lz4
  ☆13Updated last month
• scrt / KexecDDPlus
  Exploiting the KsecDD Windows driver through Server Silos
  ☆50Updated 3 months ago