
wstrace
Standalone zero-driver Windows system and API monitor in Rust
binary-analysisdebuggersdefensive-tools+7

Standalone zero-driver Windows system and API monitor in Rust

Linux system-call monitor using ptrace to trace file, process, network, and memory activity, with namespace isolation and machine learning…

Endpoint detection & Malware analysis software

.NET process monitor that hooks CLR at the native layer, dumps reflective assemblies from memory, and checks AMSI/ETW integrity vs on disk binaries.

Frida-based runtime API monitor for Android apps that logs invoked APIs, parameters, return values, and call origins across predefined or custom…