process-governor. This application allows you to put various limits on Windows processes.
804wtrace. Command line tracing tool for Windows, based on ETW.
695debug-recipes. My notes on software troubleshooting, covering debugging and tracing techniques and tools. Available at wtrace.net.
348dotnet-wtrace. A command-line tool for live tracing .NET applications, based on EventPipes.
187comon. A WinDbg extension to trace COM interactions
131dotnet-netrace. Collects network traces of .NET applications.
92lldext. My commands and scripts extending WinDbg
45mindbg. Mindbg is a simple debugger engine written in .net 4.0 for learning purposes.
37concerto. A command line tool and a library to generate TLS certificates for development purposes.
36diagnostics-kit. Diagnostics Kit is a set of tools and libraries to effectively work with logs generated in .NET applications.
35takedetour. A template (and a sample) for writing tracers on Windows. Based on the Detours library.
31diagnostics-tools. C#
26withdll. A small tool to perform DLL injections
24fsmemfs. Memory File System written in F# (using WinFsp)
22debuggable-windows. This repository contains Ansible scripts which will install and configure tools necessary to effectively debug and profile applications on Windows.
21aspnetcrypter. C#
19send2procmon. A command line tool that sends its input data to a running procmon instance.
16hexify. A .NET library to help you work with HEX strings.
12windbg-ext-template. A template for creating managed WinDbg extensions
11protoss-com-example. A sample COM server and client
9detours-win32metadata. This repository contains code to build Win32 API surface of the Detours library to be consumed by .NET projects.
8lowleveldesign-blog-samples. C#
8importando. A command line tool to modify PE file imports on process start
7EtwEnumerator-win32metadata. This repository contains code to build Win32 API surface of the EtwEnumerator library to be consumed by .NET projects.
6PowerTrace. A Powershell module containing commands to control and process ETW (Event Tracing for Windows).
5azrdp. Creates a temporary SSH tunnel to a virtual machine in Azure.
5