WinArk

Introduction

• WinArk is an open source Anti-Rootkit(ARK) tool for Windows. It supports from Windows 7 to Windows 11. We also support both 32 bit and 64 bit. Compared with other Ark tools, WinArk can run on the latest Windows 11 without updating binary files since it will automatically downloads requisite symbol files.

• WinArk's official website:

  • virtualcc.cn

Compiling

• How to build WinArk

Contributing

Contributing to WinArk is super appreciated. If you want to contribute to WinArk, please read the Coding Conventions

Screenshots

Credits

• Core features by SystemExplorer
• Disassembly powered by capstone
• PE parser by TotalPE
• Registry Explorer by TotalRegistry
• DeviceExplorer by DeviceExplorer
• Event Trace by ProcMonXv2
• Native API lib by phnt
• Theme config by systeminformer
• Windows spy by WinSpy