SysWhispers & HellsGate successor, executing protected Indirect & Direct syscalls in EDR protected settings
-
Updated
Jul 13, 2026 - Rust
SysWhispers & HellsGate successor, executing protected Indirect & Direct syscalls in EDR protected settings
Post-build string encryption packing tool
Windows Kernel ETW detection engine for monitoring untrusted access to protected files, with SIEM output and pluggable SOAR notification pipelines.
WIP One-Shot Antivirus Scanner
A simple, easy to use toolkit for generating highly optimized shellcode and tiny executables using Windows GCC.
Add a description, image, and links to the winternals topic page so that developers can more easily learn about it.
To associate your repository with the winternals topic, visit your repo's landing page and select "manage topics."