ntoskrnl topic

Collect different versions of Crucial modules.

MiroKaku

Enumerate user mode shared memory mappings on Windows.

0vercl0k

Cross-platform tool that allows browsing and extracting C and C++ type declarations from PDB files.

ergrelet

The history of Windows Internals via symbols.

AndreyBazhan

Hex-Rays microcode plugin for automated simplification of Windows Kernel decompilation.

can1357

Web-based tool that allows comparing symbol, type and syscall information of Microsoft Windows binaries across different versions of the OS.

ergrelet

Collect various versions of ntoskrnl files

gmh5225

ZeroImport is a lightweight and easy to use C++ library for Windows Kernel Drivers. It allows you to hide any import in your kernel driver by importing at runtime.

1hAck-0

A fast method to intercept syscalls from any user-mode process using InstrumentationCallback and detect any process using InstrumentationCallback.

keowu

Analysis of the vulnerability

RomanRybachek