
wstrace
Standalone zero-driver Windows system and API monitor in Rust
binary-analysisdebuggersdefensive-tools+7

Standalone zero-driver Windows system and API monitor in Rust

Linux system-call monitor using ptrace to trace file, process, network, and memory activity, with namespace isolation and machine learning…

Frida-based runtime API monitor for Android apps that logs invoked APIs, parameters, return values, and call origins across predefined or custom…

.NET process monitor that hooks CLR at the native layer, dumps reflective assemblies from memory, and checks AMSI/ETW integrity vs on disk binaries.

Endpoint detection & Malware analysis software