CrackerCat / dprobe

Dynamic trace toolkit for Windows

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

dprobe

D Probe is a dynamic trace toolkit for user mode Windows application, support custom filters, dynamic loading/unloading of tracing runtime, large volume trace records, conditional filtering in UI, low overhead even in high work load.

structure

  • bin Build target folder
  • btr The core runtime injected into target process address space, support both x86/x64 builds
  • dprobe UI console, record view, management, trace control, symbol parse etc
  • flt Several common custom filters, include fs/mm/registry/ps/net/wininet/
  • inc Common headers
  • lib Common libs
  • kbtr Empty kernel mode driver, not implement yet
  • sqlite SQLITE as metadata for configuration purpose

build

Build dprobe.sln in VS 2008/2012, run clean.bat after build.

contact

lan.john at gmail dot com

About

Dynamic trace toolkit for Windows


Languages

Language:C 97.1%Language:C++ 1.9%Language:Batchfile 0.7%Language:Assembly 0.3%Language:Makefile 0.0%